4 ms·
Can an "app with Malware" access my Google Authenticator credentials? Or read my screen while I am viewing them?
by flyGuyOnTheSly 7y ago
Can an "app with Malware" access my Google Authenticator credentials? Or read my screen while I am viewing them?
- jeroenhd 7y agoGoogle auth credentials: not without root (which malware might get if your device isn't up to dage ons security patches) Read screen: not without permission, even then not on protected screens, unless the malware has gained root access If the app doesn't get root, the Android sandbox should protect you sufficiently against attacks on the key store of Google Authenticator. However, if you copy the code to the device clipboard, the malware might read the code from there.
- btrettel 7y agoI believe my phone was compromised via CamScanner, and I factory reset my phone, changed the passwords to every account I used on my phone, and rotated every entry in my TOTP app. Not sure if any of that was necessary, but better safe than sorry as far as I'm concerned.