📚 Pixnapping (CVE-2025-48561)
Pixnapping is a new class of attacks that allows a malicious Android app to stealthily leak information displayed by other Android apps or arbitrary websites. Pixnapping exploits Android APIs and a hardware side channel that affects nearly all modern Android devices.
Pixnapping is a new class of attacks that allows a malicious Android app to stealthily leak information displayed by other Android apps or arbitrary websites. Pixnapping exploits Android APIs and a hardware side channel that affects nearly all modern Android devices.
October 24, 2025 at 4:37 PM
📚 Pixnapping (CVE-2025-48561)
Pixnapping is a new class of attacks that allows a malicious Android app to stealthily leak information displayed by other Android apps or arbitrary websites. Pixnapping exploits Android APIs and a hardware side channel that affects nearly all modern Android devices.
Pixnapping is a new class of attacks that allows a malicious Android app to stealthily leak information displayed by other Android apps or arbitrary websites. Pixnapping exploits Android APIs and a hardware side channel that affects nearly all modern Android devices.
究極の画面覗き見攻撃「Pixnapping」とは？Androidの脆弱性を狙う手口を解説 youtu.be/VhMlODYAAZQ?... @YouTubeより
究極の画面覗き見攻撃「Pixnapping」とは？Androidの脆弱性を狙う手口を解説
YouTube video by 新しいものが好きすぎるチャンネル
youtu.be
October 20, 2025 at 6:00 PM
究極の画面覗き見攻撃「Pixnapping」とは？Androidの脆弱性を狙う手口を解説 youtu.be/VhMlODYAAZQ?... @YouTubeより
The malicious app required to make a “Pixnapping” attack work requires no permissions. www.wired.com/story/a-new-...
A New Attack Lets Hackers Steal 2-Factor Authentication Codes From Android Phones
The malicious app required to make a “Pixnapping” attack work requires no permissions.
www.wired.com
October 14, 2025 at 9:42 PM
The malicious app required to make a “Pixnapping” attack work requires no permissions. www.wired.com/story/a-new-...
Gotta love vulnerability branding
I is in your android pixnapping your TOTP codes
I is in your android pixnapping your TOTP codes
Pixnapping Attack
www.pixnapping.com
October 14, 2025 at 8:41 PM
Gotta love vulnerability branding
I is in your android pixnapping your TOTP codes
I is in your android pixnapping your TOTP codes
Google has patched ‘Pixnapping’ attack in Android, further fix with December security update
Google has patched ‘Pixnapping’ attack in Android, further fix with December security update
Google is aware of a vulnerability that’s able to steal data from apps that are generally considered secure like Authenticator or Signal, using a new technique called “Pixnapping.” The vulnerability has been effective on several Google Pixel device models, as well as Samsung Galaxy devices.
more…
9to5google.com
October 14, 2025 at 5:44 PM
Google has patched ‘Pixnapping’ attack in Android, further fix with December security update
"Pixnapping is a new class of attacks that allows a malicious Android app to stealthily leak information displayed by other Android apps or arbitrary websites."
Tested to steal data from Gmail, Google Accounts, Signal, Google Authenticator, Venmo, and Google Maps
www.pixnapping.com
Tested to steal data from Gmail, Google Accounts, Signal, Google Authenticator, Venmo, and Google Maps
www.pixnapping.com
October 14, 2025 at 12:29 PM
"Pixnapping is a new class of attacks that allows a malicious Android app to stealthily leak information displayed by other Android apps or arbitrary websites."
Tested to steal data from Gmail, Google Accounts, Signal, Google Authenticator, Venmo, and Google Maps
www.pixnapping.com
Tested to steal data from Gmail, Google Accounts, Signal, Google Authenticator, Venmo, and Google Maps
www.pixnapping.com
Pixnapping Attack Lets Attackers Steal 2FA on Android
Pixnapping Attack Lets Attackers Steal 2FA on Android
The proof-of-concept exploit allows an attacker to steal sensitive data from Gmail, Google Accounts, Google Authenticator, Google Maps, Signal, and Venmo.
www.darkreading.com
October 14, 2025 at 10:27 PM
Pixnapping Attack Lets Attackers Steal 2FA on Android
Androidから30秒以内に二要素認証コードを盗むことができるサイバー攻撃「Pixnapping」
https://gigazine.net/news/20251014-android-steal-2fa-codes-pixnapping/
https://gigazine.net/news/20251014-android-steal-2fa-codes-pixnapping/
Androidから30秒以内に二要素認証コードを盗むことができるサイバー攻撃「Pixnapping」
悪意のあるAndroidアプリが他のAndroidアプリや任意のウェブサイトに表示される情報を密かに漏えいすることを可能にする新しいサイバー攻撃が「Pixnapping」です。Pixnappingはカリフォルニア大学とワシントン大学、カーネギーメロン大学の研究者によって報告されています。
gigazine.net
October 14, 2025 at 3:07 AM
Androidから30秒以内に二要素認証コードを盗むことができるサイバー攻撃「Pixnapping」
https://gigazine.net/news/20251014-android-steal-2fa-codes-pixnapping/
https://gigazine.net/news/20251014-android-steal-2fa-codes-pixnapping/
Pixel-stealing “Pixnapping” attack targets Android devices #cybersecurity #hacking #news #infosec #security #technology #privacy
Pixel-stealing “Pixnapping” attack targets Android devices
Imagine if a rogue app could glimpse tiny bits of your screen—even the parts you thought were secure, like your 2FA codes.
www.malwarebytes.com
October 14, 2025 at 12:41 PM
Pixel-stealing “Pixnapping” attack targets Android devices #cybersecurity #hacking #news #infosec #security #technology #privacy
“Anything that is visible when the target app is opened can be stolen by the malicious app using Pixnapping,”
Hackers can steal 2FA codes and private messages from Android phones
Malicious app required to make “Pixnapping” attack work requires no permissions.
go.stonking.com
October 14, 2025 at 2:31 AM
“Anything that is visible when the target app is opened can be stolen by the malicious app using Pixnapping,”
Pixnapping: a new Class of Attacks that allows a malicious Android App to stealthily leak Information displayed by other Android Apps or arbitrary Websites. Sucessfull demos on Google and Samsung phones # Infosec # Hacking # Android https://www. pixnapping.com/
Interest | Match | Feed
Interest | Match | Feed
Origin
bsd.network
October 14, 2025 at 7:10 PM
New Android Pixnapping attack steals MFA codes pixel-by-pixel #cybersecurity #hacking #news #infosec #security #technology #privacy
New Android Pixnapping attack steals MFA codes pixel-by-pixel
A new side-channel attack called Pixnapping enables a malicious Android app with no permissions to extract sensitive data by stealing pixels displayed by applications or websites, and reconstructing them to derive the content.
www.bleepingcomputer.com
October 15, 2025 at 10:19 AM
New Android Pixnapping attack steals MFA codes pixel-by-pixel #cybersecurity #hacking #news #infosec #security #technology #privacy
Hackers can steal 2FA codes and private messages from Android phones using a "Pixnapping" attack. The malicious app needed for this requires no special permissions.
Hackers can steal 2FA codes and private messages from Android phones | Malicious app required to make "Pixnapping" attack work requires no permissions.
View post on Reddit.
reddit.com
October 15, 2025 at 1:42 PM
Hackers can steal 2FA codes and private messages from Android phones using a "Pixnapping" attack. The malicious app needed for this requires no special permissions.
Android 'Pixnapping' Attack Can Capture App Data Like 2FA Codes #Technology #Cybersecurity #Pixnapping #AndroidSecurity #2FA
Android 'Pixnapping' Attack Can Capture App Data Like 2FA Codes
An anonymous reader quotes a report from The Register: Security researchers have resurrected a 12-year-old data-stealing attack on web browsers to pilfer sensitive info from Android devices. The attack,...
puretech.news
October 14, 2025 at 4:45 AM
Android 'Pixnapping' Attack Can Capture App Data Like 2FA Codes #Technology #Cybersecurity #Pixnapping #AndroidSecurity #2FA
Pixnapping Attack
Pixnapping Attack
www.pixnapping.com
October 15, 2025 at 7:55 AM
Pixnapping Attack
Bluesky's Top 10 Trending Words (past 60min):
💨x1* - gaza 🔓
💨x1* - democracy 🔓
💨x214 - 1﹐579
💨x1* - ukraine 🔓
💨x79 - stadtbild
💨x76 - d'angelo
💨x59 - benko
💨x57 - 2025-10-15
💨x55 - markey
💨x53 - 브왁
*🔓 = Unlocked Emergency Words (see img)
#ListenToBlackVoices
(Something not right? Reply!)
![Emoji Legend
💨x# | "Increased Trending Rate" for a Word (meaningful value; "💨x8 - burger" will mean "burger" is trending at 8 times its own normal rate for this time of day)
🔓 | "Unlocked" Ongoing Emergency Word (such words are not weighted down by their own previous usage; their *ongoing* increased usage--weeks, months, years--would otherwise move them down the list.)
[PREVIOUSLY USED]
⚠️💨# | "Trend Strength Rating"
⚠️🌀💨 | "Trend Strength Rating" (see above)
⚠️🌀 CAT. # | [same; "CAT." = Category, like hurricane]
💬# | 10min Post Count
🆎# | 10min Word Count
🙂# | 10min Emoji Count](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:k43ha6nlknmdw4owymqnvcat/bafkreigp6bgag3jzkool6uxrujpcrwtn6zkd7cbfrmevhaxaqhhewgolmu@jpeg)
October 15, 2025 at 1:03 PM
✦ New Android Vulnerability "Pixnapping" Threatens Crypto Wallet Security: Recent research has revealed a serious vulnerability in Android that enables harmful apps to capture sensitive on-screen content, including recovery phrases and two-factor authentication codes.
October 15, 2025 at 12:27 AM
✦ New Android Vulnerability "Pixnapping" Threatens Crypto Wallet Security: Recent research has revealed a serious vulnerability in Android that enables harmful apps to capture sensitive on-screen content, including recovery phrases and two-factor authentication codes.
Hackers can steal 2FA codes and private messages from Android phones https://arstechni.ca... #sidechannel #pixnapping #Security #android #privacy #Biz&IT #Google
October 13, 2025 at 11:00 PM
Hackers can steal 2FA codes and private messages from Android phones https://arstechni.ca... #sidechannel #pixnapping #Security #android #privacy #Biz&IT #Google
What is the Pixnapping vulnerability, and how to protect your Android smartphone? | Kaspersky official blog The Android vulnerability CVE-2025-48561 (Pixnapping) enables the theft of any data displ...
#threats"/hashtag/Threats" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link">#Threats #2FA #Android #infostealers #passwords #privacy […]
[Original post on kaspersky.co.uk]
#threats"/hashtag/Threats" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link">#Threats #2FA #Android #infostealers #passwords #privacy […]
[Original post on kaspersky.co.uk]
November 11, 2025 at 5:09 PM
What is the Pixnapping vulnerability, and how to protect your Android smartphone? | Kaspersky official blog The Android vulnerability CVE-2025-48561 (Pixnapping) enables the theft of any data displ...
#threats"/hashtag/Threats" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link">#Threats #2FA #Android #infostealers #passwords #privacy […]
[Original post on kaspersky.co.uk]
#threats"/hashtag/Threats" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link">#Threats #2FA #Android #infostealers #passwords #privacy […]
[Original post on kaspersky.co.uk]
Expertos descubrieron una técnica llamada Pixnapping, que aprovecha permisos de accesibilidad en Android para capturar pantallas con códigos de verificación 2FA.
Esto permite a los atacantes acceder a cuentas bancarias o redes sociales.
www.theregister.com/2025/10/13/a...
Esto permite a los atacantes acceder a cuentas bancarias o redes sociales.
www.theregister.com/2025/10/13/a...
October 14, 2025 at 2:12 AM
Expertos descubrieron una técnica llamada Pixnapping, que aprovecha permisos de accesibilidad en Android para capturar pantallas con códigos de verificación 2FA.
Esto permite a los atacantes acceder a cuentas bancarias o redes sociales.
www.theregister.com/2025/10/13/a...
Esto permite a los atacantes acceder a cuentas bancarias o redes sociales.
www.theregister.com/2025/10/13/a...
#안드로이드 "픽스냅핑"이 #암호화폐를 훔친다
이는 사용자에게 위협이 되며, 앱이 민감한 데이터를 훔칠 수 있게 해줍니다.
더 읽기: https://blockzhub.io/news/68ef5e6cc11627f2e7e372d3?utm_source=bluesky&utm_medium=social&utm_campaign=news_share
이는 사용자에게 위협이 되며, 앱이 민감한 데이터를 훔칠 수 있게 해줍니다.
더 읽기: https://blockzhub.io/news/68ef5e6cc11627f2e7e372d3?utm_source=bluesky&utm_medium=social&utm_campaign=news_share
October 15, 2025 at 12:12 PM
#안드로이드 "픽스냅핑"이 #암호화폐를 훔친다
이는 사용자에게 위협이 되며, 앱이 민감한 데이터를 훔칠 수 있게 해줍니다.
더 읽기: https://blockzhub.io/news/68ef5e6cc11627f2e7e372d3?utm_source=bluesky&utm_medium=social&utm_campaign=news_share
이는 사용자에게 위협이 되며, 앱이 민감한 데이터를 훔칠 수 있게 해줍니다.
더 읽기: https://blockzhub.io/news/68ef5e6cc11627f2e7e372d3?utm_source=bluesky&utm_medium=social&utm_campaign=news_share
[Ars Technica]Hackers can steal 2FA codes and private messages from Android phones - Ars Technica Malicious app required to make “Pixnapping” attack work requires no permissions.
October 14, 2025 at 11:00 PM
[Ars Technica]Hackers can steal 2FA codes and private messages from Android phones - Ars Technica Malicious app required to make “Pixnapping” attack work requires no permissions.
Pixnapping Attack Android: What Texas SMBs Need to Know — and Do Today
A new class of Android exploit called the pixnapping attack poses a serious risk. It can let a malicious app steal pixels from other apps. This includes one-time 2FA codes, private messages, and payment info. The app can do…
A new class of Android exploit called the pixnapping attack poses a serious risk. It can let a malicious app steal pixels from other apps. This includes one-time 2FA codes, private messages, and payment info. The app can do…
Pixnapping Attack Android: What Texas SMBs Need to Know — and Do Today
A new class of Android exploit called the pixnapping attack poses a serious risk. It can let a malicious app steal pixels from other apps. This includes one-time 2FA codes, private messages, and payment info. The app can do this without requesting special permissions. Texas small-and-medium businesses that rely on Android devices for authentication, banking, or client work should take this risk seriously.
softouchsystems.com
November 3, 2025 at 4:01 PM
Pixnapping Attack Android: What Texas SMBs Need to Know — and Do Today
A new class of Android exploit called the pixnapping attack poses a serious risk. It can let a malicious app steal pixels from other apps. This includes one-time 2FA codes, private messages, and payment info. The app can do…
A new class of Android exploit called the pixnapping attack poses a serious risk. It can let a malicious app steal pixels from other apps. This includes one-time 2FA codes, private messages, and payment info. The app can do…
Origin
www.blackhatethicalhacking.com
November 5, 2025 at 2:31 PM