SecurePay won the 2020 best paper award at the annual European Symposium on Security and Privacy (EuroS&P). Mobile-based 2FA is known to suffer from certain attacks such as BAndroid. The main reason is the fact that the mobile phone is not strongly separated from the browser or an app during authentication. So if the attacker…