They can intercept user credentials while providing real-time context that helps attackers convince victims to approve MFA challenges during phone calls..

A massive unsecured database exposed 149 million logins, raising concerns over infostealer malware and credential theft.