Android 'Pixnapping' Attack Steals App Data and 2FA Codes

Researchers have uncovered 'Pixnapping,' a new attack on Android devices that allows malicious apps to steal sensitive information, including 2FA codes, by exploiting GPU side channels and rendering timing attacks. Although Google has issued patches, the vulnerability remains partially mitigated, and the attack has been demonstrated on multiple devices, highlighting ongoing privacy risks in Android's graphics rendering processes.