Android devices are vulnerable to a new attack that can covertly steal two-factor authentication codes, location timelines, ...

Google has only partially mitigated the attack, which involves using a malicious Android app to secretly discern the two-factor codes generated by authenticator apps.

ZDNET's key takeaways Use these codes to forward calls, pay your bill, check balances, etc.Some of the codes work only on certain carriers or devices.One of the codes also might erase your data, so ...