Concerning the Software Token for the Smartphone.

[Thegreatmonkey]

no, it's not just a popularity thing. Smart phones are more limited in certain ways what you can do with them but these limitations also make them less vulnerable to attacks. There is also usually less to gain from attacking someone's phone, because there is generally less data stored on them. Attacking smartphones is not as easy as attacking a Windows PC- script kiddies and creators of malicious software generally take the path of least resistance. Why waste more time hacking something that's less likely to prove useful to the attacker when they can more easily get into something that's more likely to be a treasure trove of stealable information?

Window computers are attack a lot more because Windows it is on like 95% of the computers around the world, making them more profitable to attackers. I will agree that Windows makes it easy for attackers but lets switch it up. Lets say Macintosh was run on most of the computers around the world vs Windows only having say 10%. Who do you think hackers would go after, Windows or Macintosh? Answer Macintosh because it would be more of a profit to the attackers.

Also being that phones and other small devices are easily lost / stolen, it is much, much more common (and much easier) to steal someone's actual phone and break into it directly, rather than trying to attack it remotely. And this type of attack, known as "man in the middle," works equally with both the phone app and the physical token.

Man in the middle attack is a form of active eavesdropping in which the attacker makes independent connections with the victims and relays messages between them, making them believe that they are talking directly to each other over a private connection, when in fact the entire conversation is controlled by the attacker.
MITM Attack

Man in the middle attack dose not invade the attacker stealing the devices itself.