As Gmail and YouTube users take to support forums to complain about accounts being hacked despite having 2FA activated, Google responds with 7-day recovery solution.
Upon installation, the apps request intrusive permissions that allow the malware to harvest and exfiltrate sensitive information to a hacker-controlled server with notable features.