Peeking into Your App without Actually Seeing It: UI State Inference and Novel Android Attacks

It is reported that on the Android system (and likely other OSes), a weaker form of GUI confidentiality can be breached in the form of UI state by a background app without requiring any permissions, leading to a class of attacks which are named UI state inference attack.