Published • loading... • Updated
New Attack Alert As Android 2FA Codes Stolen In 30 Seconds Flat
Pixnapping malware exploits Android OS graphics features to steal two-factor authentication codes with success rates up to 73% on Pixel devices, researchers found.
- On Monday, researchers from the University of California, Berkeley, University of Washington, University of California, San Diego and Carnegie Mellon University demonstrated Pixnapping can steal 2FA codes from Google Pixel and Samsung Galaxy phones in under 30 seconds.
- The attack exploits Android OS standard APIs and a hardware side‑channel, using the Intents function to send activities into the rendering pipeline and infer pixels.
- Different Pixel devices recorded 73%, 53%, 29%, and 53% success rates for the Pixel 6, 7, 8, and 9, with average recovery times of 14.3 to 25.8 seconds.
- Google issued a partial September Android security patch for CVE‑2025‑48561, but researchers demonstrated a workaround; Google plans an additional patch in the December Android security bulletin with no known exploitation.
- Users are advised to install the latest security patches and avoid untrusted apps since Pixnapping requires installing and opening a malicious app on Android devices.
Insights by Ground AI
14 Articles
14 Articles
Pixnapping attack lets malicious apps steal sensitive data from Android devices
Pixnapping is a newly disclosed class of side-channel attacks that targets Android smartphones. The attack, conceived by researchers, would allow a malicious app to leak secret information displayed on an Android device's screen – for example, one-time codes or other sensitive values shown by apps or websites.Read Entire Article
Pixnapping flaw on Android: With zero permissions, it can steal 2FA codes and data, here is what you need to do
Researchers say that in the case of Google Authenticator, the Pixnapping vulnerability allows attackers to steal critical 2FA codes in under 30 seconds while remaining hidden from the user.
·Uttar Pradesh, India
Read Full ArticleCoverage Details
Total News Sources14
Leaning Left2Leaning Right1Center3Last UpdatedBias Distribution50% Center
Bias Distribution
- 50% of the sources are Center
50% Center
L 33%
C 50%
R 17%
Factuality
To view factuality data please Upgrade to Premium