A remote access trojan known as CloudZ RAT may be capable of stealing one-time passwords. This theft is potentially carried out through the Microsoft Phone Link. The specifics of the vulnerability and its impact are not fully detailed.