A vulnerability in the windows phone link is being exploited by cloudz rat malware to steal credentials and one-time passwords. The malware is reportedly able to abuse the phone link to access texts and bypass two-factor authentication. The extent of the threat is not entirely clear, with some outlets describing it as a potential or possible exploit, while others confirm the malware's ability to steal sms and otp information.