logoalt Hacker News

pepvetoday at 11:54 AM0 repliesview on HN

Someone in the linked Github thread describes an attack where the attackers waited for the victim to use their Yubikey for an AWS login, giving the attackers access to AWS as well. I don't think hardware 2FA is safe against a RAT.