Google Authenticator and Network Breaches

One company's network breach became worse due to Google Authenticator. The compromise of a customer support system led to attacks on 27 cryptocurrency industry customers. The attacks were initiated when a retool employee clicked on a phishing link in a text message claiming to be from the company's IT team. The compromised employee provided both a password and a temporary one-time password from Google Authenticator. Google Authenticator is not securely synced via the cloud, making it vulnerable if a Google account is compromised.