When the user logs into their real banking app, the malware captures their two-factor authentication codes, giving the scammer everything they need to drain the account.” “While we have advanced ...