CloudZ RAT exploits Phone Link since Jan 2026, stealing credentials and OTPs via Pheno plugin, bypassing 2FA protections.
Researchers say malicious actors could gain access to notifications, messages, and OTPs synced between an infected PC and a ...