Android devices are vulnerable to a new attack that can covertly steal 2FA codes, location timelines, and other private data ...