Microsoft Phone Link abused to steal SMS OTPs from enterprise PCs

A previously undocumented .NET trojan and its companion Pheno plugin allow attackers to capture mobile authentication codes from Windows systems without compromising the phone.

Raccontata dacsoonline.com