#taptrap

[cyber-sec]

Android Users, Beware: TapTrap Attack Hijacks Your Taps

A new attack called TapTrap uses Android's own screen animations to trick you into granting camera access or even wiping your phone — all without you knowing. It works on Android 16 and has quietly bypassed existing defences.

Source: TapTrap | USENIX Paper

Read more: CyberSecBrief

[bekindrewindfnaf]

Tape Bonnie: 1973 A talented audio engineer, William made the tape suits to mimic the animatronics, as well as the sounds/dialogue they have on stage! Silent mascots are no more with this grand invention. Just don’t get the cassette wet-

[monetizeme]

TapTrap is a new attack on Android that lures you into performing actions you did not intend to do. This allows an app to silently access your camera or location, or even erase your entire device — all without your consent.

TapTrap is a new type of attack targeting Android devices. It allows an app without any permissions to misuse screen animations. This app can secretly open another screen, such as a permission prompt, and make it invisible. The attack can then be used to trick you into performing sensitive actions, such as granting camera permissions or even erasing your device, without your consent.

The idea is simple: imagine you’re using an app. While you use it, it opens another screen, such as a system prompt or simply another app. Normally, Android shows an animation when the screen changes, such as the new screen sliding or fading in. However, the app can tell the system that a custom animation should be used instead that is long-running and makes the new screen fully transparent, keeping it hidden from you. Any taps you make during this animation go to the hidden screen, not the visible app. The app can then use this to lure you into tapping on specific areas of the screen that correspond to sensitive actions on the hidden screen, allowing it to perform actions without your knowledge.