BACKGROUND:
Brian Krebs reported today about cybercrime services that help attackers intercept the one-time passwords (OTPs) that many websites require as a second authentication factor in addition to passwords. These bot-based services that make it relatively easy for crooks to phish OTPs from targets.