Microsoft's Director of Identity Services wrote an article urging customers to move away from phone (call or SMS) uses for Multifactor authentication.

If you see any of these malware strains on your enterprise networks, stop everything you're doing and audit all systems.