Google has only partially mitigated the attack, which involves using a malicious Android app to secretly discern the two-factor codes generated by authenticator apps.

Android devices are vulnerable to a new attack that can covertly steal two-factor authentication codes, location timelines, ...

Researchers have identified a new attack method that can allow malicious applications to steal sensitive data from Android ...

Researchers have discovered a new type of attack that can steal sensitive information on Android devices, like 2FA codes, ...

It allows a malicious Android application to access and leak information displayed in other Android apps or on websites. It ...

You can move Google Authenticator to a new phone so that your new device can gain an additional level of security through two ...

Researchers have detailed the Pixnapping attack on Android, which has inferred on-screen data and exposed seed phrases and ...

Android devices are vulnerable to a new attack that can covertly steal two-factor authentication codes, location timelines, ...

Researchers say that in the case of Google Authenticator, the Pixnapping vulnerability allows attackers to steal critical 2FA ...

Nasty and it still works Security researchers have resurrected a 12-year-old data‑stealing browser attack and adapted it to ...

Pixnapping side-channel can steal 2FA codes pixel-by-pixel on Android 13–16; CVE-2025-48561 patched Sept 2025 but workaround ...