Google Authenticator app lets other apps take screenshots of its code. Issue was first reported to Google in October 2014, but it was never addressed.

Google has fallen victim to its own ad platform, allowing threat actors to create fake Google Authenticator ads that push the DeerStealer information-stealing malware.

A fake 2FA authenticator was found to be downloaded 10,000 times from Google Play. The app was known to install a banking-fraud trojan that looks for financial data and other personal information ...