Likely Legitimate/True - Claim about Android 2FA code theft vulnerability

https://arstechnica.com/security/2025/10/no-fix-yet-for-attack-that-lets-hackers-pluck-2fa-codes-from-android-phones/ Is the claim in this link true?

✅ This is largely true. The Ars Technica article discusses a real cyber attack called "Pixnapping," which allows malicious Android apps to steal 2FA codes by capturing screen content. The article is from a reputable source and the attack is confirmed by other cybersecurity discussions. Android users should be cautious with app installations until a security patch is released.

• https://arstechnica.com/security/2025/10/no-fix-yet-for-attack-that-lets-hackers-pluck-2fa-codes-from-android-phones/
• https://gigazine.net/gsc_news/en/20251014-android-steal-2fa-codes-pixnapping/