Experts warn Microsoft Phone Link tool exploited by 'unknown threat' to steal SMS and OTP info
- A new CloudZ plugin, Pheno, hijacks Microsoft Phone Link to steal SMS and OTPs from connected Android devices
- This enables attackers to bypass 2FA without compromising the phone itself
- The RAT retains full remote access capabilities, with researchers urging a shift away from SMS‑based authentication
A new version of the CloudZ remote access trojan (RAT) for Windows now comes with a new plugin that steals data from a connected Android device, experts have revealed.
Security researchers Cisco Talos recently spotted the upgraded variant while investigating a breach that has been ongoing since January 2026.
Windows 10 and 11 operating systems have a feature called Microsoft Phone Link, which allows users to connect their Android and iOS mobile devices to their computers. They can then use their computers to take and make calls, text people, and more, without needing to pick up the smartphone.
Latest Videos From TechRadar
Stealing 2FA...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
