Cybersecurity researchers have revealed details of a breach involving the CloudZ remote access tool and a previously undiscovered plugin called Pheno designed to steal user credentials and one-time passwords. Based on the capabilities of both the CloudZ RAT and Pheno plugin, the attack was aimed at compromising victims’ login credentials and potentially their OTPs.
