What's at risk: credentials, messages (including phone OTPs), and crypto wallet data are explicitly targeted. For Blink users, OTP interception is the key concern. Note: 2FA does not protect you on a compromised device — the attacker can read codes in real time.