The OTP interception service featured earlier this year — Otp [.]agency — advertised a web-based bot designed to trick targets into giving up OTP tokens.