Flaw That Allows a Malware to Steal 2FA Codes from Google Authenticator Could Have Been Fixed Long Back

Last month, a Dutch cyber-security firm ThreatFabric discovered the first-ever malware that could bypass Google's two-factor authentication via its Authenticator application to extract one-time passcodes from a user's device, using a simple technique that sends an OTP and takes a screenshot of a user’s screen.

source https://gadgets.ndtv.com/apps/news/google-authenticator-flaw-2014-report-code-stealing-malware-night-watch-cyber-security-2192260