Pixnapping Attack (CVE-2025-48561), útok na zařízení s Androidem

Byly publikovány informace o útoku na zařízení s Androidem pojmenovaném Pixnapping Attack (CVE-2025-48561). Aplikace může číst citlivá data zobrazovaná jinou aplikací. V demonstračním videu aplikace čte 2FA kódy z Google Authenticatoru.

včera 12:33 | Ladislav Hagara | Bezpečnostní upozornění

Komentáře

[včera 18:03 Slavko]

Zdá sa, že je to síce realizovateľné, ale nie masovo:

"Google says that leveraging this data leak technique requires specific data about the targeted device, which, as the researchers noted, leads to a low success rate. Current verifications found no malicious apps on Google Play leveraging the Pixnapping vulnerability."

[Bichaka]

This Pixnapping attack sounds really scary! It highlights the importance of being extremely careful about the permissions we grant to apps. Makes you wonder about the security of even seemingly simple things. It's almost like watching a digital disaster unfold in slow motion. It kind of reminds me of simulating catastrophic events in Solar Smash, but with real-world consequences. Definitely something to keep an eye on!