The bots that steal your 2FA codes (report).

[WST16]

The Booming Underground Market for Bots That Steal Your 2FA Codes

The bots convincingly and effortlessly help hackers break into Coinbase, Amazon, PayPal, and bank accounts.

www.vice.com

 

[SynoMan]

And my bank is using SMS for 2FA

 

[fredbert]

I saw this linked from here and there's a good summary of what's happening:

‘The Booming Underground Market for Bots That Steal Your 2FA Codes’

Link to: https://www.vice.com/en/article/y3vz5k/booming-underground-market-bots-2fa-otp-paypal-amazon-bank-apple-venmo

daringfireball.net

The short story is: be wary of anything asking for your account credentials.

Having already obtain username and passwords (or viable ones) the hacking scripts contact the account holder (so that info is needed too from the data breach) and [try to] get them to pass on the current 2FA.