Another reminder for "Prevention is better than cure" - Once you are infected by Malware, you will be at the mercy of its author who will determine what they want to get out of you.

https://www.zdnet.com/article/android-malware-can-steal-google-authenticator-2fa-codes/

MFA - We constantly hear about two-step verification failure so, please remember this - All Authenticators Are Vulnerable but NOT all authenticators equally vulnerable.

Here’s a list of common credential types with an assessment of vulnerabilities (excluding coercion)

https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/All-your-creds-are-belong-to-us/ba-p/855124