Researchers have discovered a new type of attack that can steal sensitive information on Android devices, like 2FA codes, ...

A new side-channel attack called Pixnapping enables a malicious Android app with no permissions to extract sensitive data by stealing pixels displayed by applications or websites, and reconstructing ...

A new Android attack called Pixnapping lets hackers steal what’s displayed on your phone — even private 2FA codes and ...

Google has only partially mitigated the attack, which involves using a malicious Android app to secretly discern the two-factor codes generated by authenticator apps.

Samsung's patent document describes a tiny sensing loop around the hole in the screen that can detect small cracks.

Pixnapping was performed on five devices running Android versions 13 to 16: the Google Pixel 6, Google Pixel 7, Google Pixel 8, Google Pixel 9, and Samsung Galaxy S25. However, it is possible that ...