Skip to content
Threat Feed

Tag

Phone-Link

1 brief RSS
high advisory

CloudZ RAT Abusing Windows Phone Link to Steal OTPs

An unknown attacker is using the CloudZ RAT and its Pheno plugin to hijack the Microsoft Phone Link application and intercept SMS and OTP messages from connected mobile devices, active since at least January 2026.

Windows 10 +2 cloudz rat pheno phone-link otp credential-theft
2r 6t