Google Authenticator x Hydro Authenticator

how hackers can access sites with Google Authenticator:
https://medium.com/mycrypto/dissecting-a-hitbtc-phishing-site-8e631a6c29a3

- Google Authenticator: the code is showed on the Google Auth to be added on the website --> RISK: phishing website

- Hydro Authenticator: the code is showed on the website to be added on the Hydro app (to be authenticated) --> Hydro app validates correct codes only.