Pixnapping could be used to steal private data, including 2FA codes. Side-channel attack abuses Google Android APIs to steal data on display. Flaw is partially patched, although a more complete fix is ...

A new Android-focused proof-of-concept exploit would enable threat actors to steal secrets like multifactor authentication credentials from certain Android devices. The attack, named "pixnapping," was ...