Flutterby™! : Google Authenticator code stealer

Well fuck. Android malware can steal Google Authenticator 2FA codes

A new version of the "Cerberus" Android banking trojan will be able to steal one-time codes generated by the Google Authenticator app and bypass 2FA-protected accounts.

Interesting: "Cerberus" Android malware also uses the accellerometers to hide itself from analysis if the phone is generally static.