Demo: How Malicious Apps Can Easily Hide Copying Clipboard Data on Android 14
Demo: How Malicious Apps Can Easily Hide Copying Clipboard Data on Android 14
Sensitive clipboard data on Android 14 devices may be compromised without your consent or knowledge. Learn more about this security issue with a full demonstration and discover how you can limit app access and protect your data.
Clickbaity headline to scare you for no reason with an easily detectable behavior. If a white box suddenly appears on top of all my other apps I would get really suspicious and start to uninstall apps until it went away.
That says, I do agree with the conclusion that granting permission to draw over other apps is dangerous.
The author proceeds to style the overlay like a toast, making it much less obvious than the ever-present white square. I wouldn't dismiss it so easily.
Theoretically if youre on the all they could just add whatever would originally be covered by the toast
I tested the demo app. Interestingly, the attack doesn't work on samsung oneui 5, as mentioned in the article. Where even stock android 14 is vulnerable to this attack.