The Growing Threat of OTP-Stealing Malware: Insights from Zimperium’s zLabs

Zimperium’s zLabs team identified a large-scale SMS stealer malware campaign, primarily aimed at Android devices. This malware aims to steal One-time passwords (OTPs) by tricking users into downloading malicious applications. The malware then monitors all incoming SMS messages, stealing OTPs to gain unauthorized access to sensitive accounts. The campaign has targeted OTP messages from over 600 global brands, affecting users in 113 countries, with Russia and India being the main targets. Zimperium’s Mobile-First platform protects users against these emerging threats.