CloudZ malware abuses Microsoft Phone Link to steal SMS and OTPs

A new version of CloudZ remote access tool is deploying a malicious plugin called Pheno to steal sensitive codes from mobile devices via Microsoft Phone Link. This malware abuses Microsoft Phone Link connection to hijack SMS and OTPs. The attack targets mobile devices connected to Microsoft Phone Link.