Google 2FA decentralised alternative ?

[dkbit98]

There is a way hackers can compromise your 2FA with a virus.
One example for Android phones is Anubis Trojan Virus.
Virus Anubis renders 2FA void via a man-in-the-middle-atack.
It is targeting crypto exchanges

Read more in this articles:
https://blog.zerononcense.com/2019/07/27/anubis-virus-major-android-virus-attacking-bitfinex-binance-exchange-apps-and-others-pt-1/
https://www.zdnet.com/article/anubis-android-banking-malware-returns-with-a-bang/

Adding up some links about that Anubis Trojan.

https://www.bleepingcomputer.com/news/security/anubis-android-trojan-spotted-with-almost-functional-ransomware-module/

Android system cant be affected with Virus but only with malware and even application permission.

Article you posted is older date from April.
I found more recent info from Trend Micro
https://blog.trendmicro.com/trendlabs-security-intelligence/anubis-android-malware-returns-with-over-17000-samples/


Faebook was also using 2FA for serving us ads:
https://www.eff.org/deeplinks/2019/07/fixed-ftc-orders-facebook-stop-using-your-2fa-number-ads

[naska21]

What exactly do you mean by "decentralized 2fa"? Just because something has the word "Google" in front of it, doesn't mean it isn't decentralized. You own your keys, and you are completely responsible for them. However I would argue that decentralized 2fa is unnecessary for the average person, as the chance of losing keys is much higher. Authy is tied to your phone number rather than your phone, making it much easier to restore lost data, without having to worry too much.

"My 2 cents" in regard of  "decentralized 2fa":

Hydrogen 2FA uses cutting-edge cryptography and the blockchain to secure your accounts, transactions, and payments.

that said, relevant  services  should adopt Hydro Raindrop  so you could use that "decentralized 2fa alternative".

[dkbit98]

What exactly do you mean by "decentralized 2fa"? Just because something has the word "Google" in front of it, doesn't mean it isn't decentralized. You own your keys, and you are completely responsible for them. However I would argue that decentralized 2fa is unnecessary for the average person, as the chance of losing keys is much higher. Authy is tied to your phone number rather than your phone, making it much easier to restore lost data, without having to worry too much.

"My 2 cents" in regard of  "decentralized 2fa":

Hydrogen 2FA uses cutting-edge cryptography and the blockchain to secure your accounts, transactions, and payments.

that said, relevant  services  should adopt Hydro Raindrop  so you could use that "decentralized 2fa alternative".

Interesting, thank you.
First time I heard about that, but I will check it out.
Cheers!

[dkbit98]

News from Microsoft:
Users with multi-factor authentication blocks 99.9% of account hacks

https://www.microsoft.com/en-us/security/technology/identity-access-management/passwordless
https://www.zdnet.com/article/microsoft-using-multi-factor-authentication-blocks-99-9-of-account-hacks/

Bold statement to say.
You can read full Whitepaper here:
Password-less protection
https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE2KEup