Yet another example of why SMS shouldn't be used for 2FA ever. Besides the fact that Sim-swap attacks are still super common, if they've compromised the Androi

Yet another example of why SMS shouldn't be used for 2FA ever. Besides the fact that Sim-swap attacks are still super common, if they've compromised the Android devices themselves (as is implied in the article) then they could grab the Device ID that way and potentially add some SMS-forwarding malware perhaps?