Demo: How Malicious Apps Can Easily Hide Copying Clipboard Data on Android 14

ijeff@lemdro.idmod to Android@lemdro.id – 49 points –
Demo: How Malicious Apps Can Easily Hide Copying Clipboard Data on Android 14
fingerprint.com
4

Clickbaity headline to scare you for no reason with an easily detectable behavior. If a white box suddenly appears on top of all my other apps I would get really suspicious and start to uninstall apps until it went away.

That says, I do agree with the conclusion that granting permission to draw over other apps is dangerous.

The author proceeds to style the overlay like a toast, making it much less obvious than the ever-present white square. I wouldn't dismiss it so easily.

Theoretically if youre on the all they could just add whatever would originally be covered by the toast

I tested the demo app. Interestingly, the attack doesn't work on samsung oneui 5, as mentioned in the article. Where even stock android 14 is vulnerable to this attack.