Pixnapping: New Class Attack including 2FA exploit

[Sticky Bomb]

This is very a very serious case, now opening an app has become a security threat. I'm not surprised though since technology is advancing, same way social engineering is advancing too.

I'm curious if this virus could be installed over SMS? If so then its  better never to insert your regular interaction sim in the separate device, but buy a new SIM which you'll use for Internet access for only the limited financial and crypto apps installed on your new device which must have been downloaded from their official sites.

[albon]

It's good that you brought up this topic for beginners, as there are many who don't know anything about the Pixnapping attack, which I consider it to be a very smart and malicious type of attack as this attack can be occur without any permissions, and allowing the attacker can capture everything that appears on the screen of other applications installed on the phone.

This means the attacker can access the two-factor authentication app and read its changing codes... Therefore, the Google application alone is not enough to protect you from fraud.

We must follow the necessary security measures and never install cracked applications from unofficial sources, and always keep our phones and apps up to date. I strongly recommend using a separate phone away financial or crypto-related activities as a testing ground.

[EluguHcman]

There is a video demonstration so I urge everyone to watch it. And they have answered some questions too in the link provided.

We all know that all of us could have been using 2FA as another extra layer of protection. We uses it from everything related to crypto, including in exchanges and even crypto based platforms. But now this researches have should that it could be exploited by cyber threat.

https://www.pixnapping.com/

I guess that was just a warning and does not require users to be helter skelter. There has not been such virus yet but only detected and speculated the vulnerability of the android with certain O.S.

If we give a thought about the emergence of technologies and scams, the modern of the androids if not updated maybe be vulnerable to   such threat.

I might also not recommend storing your Bitcoin or crypto assets on mobile devices. Hardware wallets will keep you safer.

[promise444c5]

I'm curious if this virus could be installed over SMS? If so then its  better never to insert your regular interaction sim in the separate device, but buy a new SIM which you'll use for Internet access for only the limited financial and crypto apps installed on your new device which must have been downloaded from their official sites.

it’s not a virus it’s a flaw that can be exploited on Android OS itself.. Google is  currently incharge of maintaining Android (OS).. it was given security venerability CVE-2025-48561 , if you’ve read the article then you must have seen the url but anyways that is it.
A malware can actually be installed through an SMS  if that’s what you mean .. but you just receiving , opening and reading doesn’t pose any risk, you have to click the bait by downloading. that’s not what the post is all about anyway.