Android rat (with sms interception or sms logger feature) + Android OS user (phishing page form fields) + otp retrieval, this should get you on the right path. For educational purposes only (now you know).
Android rat (with sms interception or sms logger feature) + Android OS user (phishing page form fields) + otp retrieval, this should get you on the right path. For educational purposes only (now you know).
you can't, it's only possible if you can hijack the bank connection or the victim connection then intercept the request & also you can dump the json response when you hijack the connection