[$] Retrieving pixels from Android phones with Pixnapping

A new class of attacks on Android phones, called 'Pixnapping', was announced on
October 13. It allows a malicious app to gather output rendered in a
victim app, pixel-by-pixel, by exploiting a GPU side-channel. Depending on
what the victim app displays, anything from sensitive email and chats to
two-factor authentication (2FA) codes could be captured—and shipped off to
an attacker's site.