https://www.pixnapping.com/

"pixnapping is a new class of attacks that allows a malicious android app to stealthily leak information displayed by other android apps or arbitrary websites. pixnapping exploits android apis and a hardware side channel that affects nearly all modern android devices. we have demonstrated pixnapping attacks on google and samsung phones and end-to-end recovery of sensitive data from websites including gmail and google accounts and apps including signal, google authenticator, venmo, and google maps. notably, our attack against google authenticator allows any malicious app to steal 2fa codes in under 30 seconds while hiding the attack from the user."