pepve·3 mesi fa·discussSomeone in the linked Github thread describes an attack where the attackers waited for the victim to use their Yubikey for an AWS login, giving the attackers access to AWS as well. I don't think hardware 2FA is safe against a RAT.
pepve·6 anni fa·discuss"[...] where adversaries can exploit American communications systems, cell phones and the electromagnetic spectrum." (emphasis mine)Wait, what?