Two-factor authentication faces new security threat from OTP bots

Beware of being tricked by bots asking for your one-time passwords in order to log in to your online accounts. — AFP Relaxnews

A new breed of malicious bots are capable of stealing the one-time passwords (OTPs) from online two-factor authentication systems by calling their victims directly. These fully-configurable intelligent agents can now be purchased over the Internet by would-be scammers.

Two-factor authentication involves adding at least one extra step to the log-in process for an online account. This can take several forms, including a temporary unique code sent by SMS. In theory, this system makes it much harder for hackers to access your accounts, even if they have your password.