https://wccftech.com/smart-spies-alexa-and-google-home-abused-to-steal-passwords/

Google Home and Amazon Alexa are known security threats making it possible and easy for both the tech giants and criminals to ultimately gain access to a user's home. New threat made possible through devices has now been identified by whitehat hackers of Security Research Labs.

The team developed eight apps as four Alexa "skills" and four Google Home "actions" that passed through Amazon and Google vetting processes but were actually spying on users. SRLabs team created these apps for each platform with legitimate use (like a horoscope app), but hid malicious code inside.