Google has only partially mitigated the attack, which involves using a malicious Android app to secretly discern the two-factor codes generated by authenticator apps.

Can your smartphone really spy on or secretly listen to you? From voice assistants like Siri and Google ... My brother-in-law ...