Trojan Abuses Microsoft Phone Link App to Steal Your Passwords

Trojan abuses Microsoft Phone Link app to steal your passwords

Cross-device syncing isn't always safe. Here's everything you need to know about this threat.

CloudZ malware abuses Microsoft Phone Link to steal SMS and OTPs

A new version of the CloudZ remote access tool (RAT) is deploying a previously unseen malicious plugin called Pheno that hijacks the Microsoft Phone Link connection to steal sensitive codes from mobile devices.

CloudZ RAT Malware Could Exploit Microsoft Phone Link App to Access Messages and OTPs, Researchers Warn

Microsoft’s Phone Link app could become a target for threat actors if a connected Windows PC is infected with malware. According to security researchers, an ongoing campaign potentially targets victims with a remote access trojan (RAT) called CloudZ. It reportedly compromises systems and can intercept sensitive information synced between smartphones and PCs when using the Phone Link app.

Your Phone Link setup on Windows could be at risk from this Trojan

TL;DR Attackers are spreading CloudZ RAT via a fake ScreenConnect update that quietly installs malware. The malware can steal browser credentials and even pull data from Microsoft Phone Link using a plugin, putting synced phone and PC data at risk. If your PC is compromised, anything shared with your phone, including messages and OTPs, could be exposed. Installing software from trusted sources is the only way to stay cautious. Microsoft Phone L…