Wired Follow A New Attack Lets Hackers Steal 2-Factor Authentication Codes From Android Phones The malicious app required to make a “Pixnapping” attack work requires no permissions. https://www.wired.com/story/a-new-attack-lets-hackers-steal-2-factor-authentication-codes-from-android-phones/ wired.com
