Google has only partially mitigated the attack, which involves using a malicious Android app to secretly discern the two-factor codes generated by authenticator apps.

Researchers have identified a new attack method that can allow malicious applications to steal sensitive data from Android ...

Android devices are vulnerable to a new attack that can covertly steal two-factor authentication codes, location timelines, ...

You can move Google Authenticator to a new phone so that your new device can gain an additional level of security through two ...

Researchers have detailed the Pixnapping attack on Android, which has inferred on-screen data and exposed seed phrases and ...

Researchers have discovered a new type of attack that can steal sensitive information on Android devices, like 2FA codes, ...

Pixnapping could be used to steal private data, including 2FA codes. Flaw is partially patched, although a more complete fix is due in December. A new attack method demonstrated by researchers could ...

Researchers say that in the case of Google Authenticator, the Pixnapping vulnerability allows attackers to steal critical 2FA ...

Pixnapping side-channel can steal 2FA codes pixel-by-pixel on Android 13–16; CVE-2025-48561 patched Sept 2025 but workaround ...

Android devices are vulnerable to a new attack that can covertly steal two-factor authentication codes, location timelines, ...

Nasty and it still works Security researchers have resurrected a 12-year-old data‑stealing browser attack and adapted it to ...

Google is aware of a vulnerability that’s able to steal data from apps that are generally considered secure like ...