Hackers can steal 2FA codes and private messages from Android phones:

The new attack, named Pixnapping by the team of academic researchers who devised it, requires a victim to first install a malicious app on an Android phone or tablet. The app, which requires no system permissions, can then effectively read data that any other installed app displays on the screen.

Tying our phone numbers to every account we make eas a horrible idea.

#Android