> an uptick in services on the cybercrime underground that allow attackers to intercept one-time password (OTP) tokens [...] we’ve seen actors provide access to

> an uptick in services on the cybercrime underground that allow attackers to intercept one-time password (OTP) tokens [...] we’ve seen actors provide access to services that call victims, appear as a legitimate call from a specific bank and deceive victims into typing an OTP or other verification code So not intercept, just phish.