2KeyFactory: The 2FA App With an Extra Installer

2KeyFactory promised offline 2FA in the Microsoft Store. I traced its loader through Telegram, a second MSI, a Sepolia contract, and a Python backdoor.

18 min read