Google has only partially mitigated the attack, which involves using a malicious Android app to secretly discern the two-factor codes generated by authenticator apps.
New Android exploit “Pixnapping” can secretly read on-screen data like 2FA codes and messages using pixel timing — even ...