CERT24CloudZ malware abuses Microsoft Phone Link to steal SMS-delivered one-time passwordsLoading data…
CERT24Threat Observatory
Period

CloudZ malware abuses Microsoft Phone Link to steal SMS-delivered one-time passwords

The CloudZ Windows malware toolkit abuses Phone Link to steal SMS messages and one-time passwords (OTPs) synchronized to a victim’s computer, without directly compromising the mobile device. According to Cisco Talos, the activity has been ongoing since at least January 2026.

← Back to intelligence

CloudZ malware abuses Microsoft Phone Link to steal SMS-delivered one-time passwords

The CloudZ Windows malware toolkit abuses Phone Link to steal SMS messages and one-time passwords (OTPs) synchronized to a victim’s computer, without directly compromising the mobile device. According to Cisco Talos, the activity has been ongoing since at least January 2026.