CVE-2025-48561

Android devices from Google and Samsung have been found vulnerable to a side-channel attack that could be exploited to covertly steal two-factor authentication (2FA) codes, Google Maps timelines, and other sensitive data without the users' knowledge pixel-by-pixel. The attack has been codenamed Pixnapping by a group of academics from the University of California (Berkeley), University of

Alles, was auf dem Display eines Android-Gerätes sichtbar ist, lässt sich ausleiten. Die Angreifer-App braucht keine speziellen Berechtigungen. ( Sicherheitslücke , Google )