49
Hackers can steal 2FA codes and private messages from Android phones
(arstechnica.com)
This is a most excellent place for technology news and articles.
Gotta wonder why random apps don't need special permissions to run and operate other apps. You can cause plenty of trouble maliciously navigating a browser even if you can't see the screen.