Google Authenticator Is Vulnerable To Android Malware



x

Google Authenticator with its one-time password (OTP) verification system can be used to add an extra layer of security on platforms such as YouTube, Gmail, Facebook, Apple ID, Discord and others. But, a new report by security firm ThreatFabric claims that the two-factor authenticator (2FA) itself is not completely secure.

The report, ‘2020 - Year of the RAT’ is an extensive analysis of Remote Access Trojans (RATs), something that it predicts will be used more by threat actors. RATs can be used by threat actors in conjunction with malware to potentially gain complete remote access on a device.

According to the report, the Android-banking trojan Cerberus, when used along with a RAT, can potentially help threat actors steal the OTP generated by Google Authenticator. RATs have the ability to download files from an infected device. The malware can even be used to set up TeamViewer on the device to gain full remote access.

With such accessibility, threat actors can use all the apps and even steal 2FA codes from Google Authenticator. The report explains that the trojan can effectively bypass OTP authentication services as “When the app (Google Authenticator) is running, the Trojan can get the content of the interface and can send it to the C2 server.”

Google Authenticator is an authentication app that can be connected to various Google services or even other platforms. Users can use the app to make their accounts on supported platforms, more secure, by adding the need to enter a 2FA code in addition to their password while logging in. The 2FA codes are six to eight-digit-long unique codes that keep changing over time, similar to an OTP. In addition, users can even use text authentication or back-up codes when they don’t have access to the app.