A new outdoor malware variant for Android can extract and steal one-time (OTP) codes generated using Google Authenticator.

https://cyware.com/news/new-malware-strain-steals-google-authenticator-2fa-codes-from-under-your-nose-ba86c05a