The malicious app required to make a “Pixnapping” attack work requires no permissions.



Source: wiredsecurity
Source Link: https://www.wired.com/story/a-new-attack-lets-hackers-steal-2-factor-authentication-codes-from-android-phones/