app they called "PIN Skimmer"

So while the way it goes about collecting stuff is different, you'd still have to have the malicious app installed and give it permission for access to your microphone and camera.

First they need to get the app on my phone, second I have key tones turned off, third I use a pattern unlock AND code lock. Not to mention xprivacy blocks apps from using anything without my say so.

well, that isnt new at all.. Also, there are tools out there, in the dark corner of teh webs, you would tzhrow your phone away if u know.. i work with these tools so i can counterfight them.. Me, personally, i wouldnt use this tool. i just need your phone. no pin, no nothing..even when its off. i can kill the pin and make a new one, also puk, and other passwords you might use on your Android device (pattern lock/etc).. Of course, im not gonna link anything, nor to i answer PM´s with question where u can get this stuff..:3eyes: im using a virtual framework on my phone..its like a virtual box 😉 safest thing u can use.. also, my system is restricted, even google or system cant phone home, send my data or whatever..(sensors are turned of atm at my Phone, thanks to an special "Framework" 😉 BetA edit: @dcx_badass yes, XPrivacy is a good start..one of the best and valuables tool for android Xposed FM...i would also ad AFwall+ with dinit support and some manuall modifikations to teh rom itself. i made my own rom, cause i was sick of google changing my rom and such..now, google cant do **** on my phone 🙂 im the full ADMIN, my Phone is under "My" controll. not googles or anything else..it took me 1/2 year to get there..

That's precisely why I don't use my mobile for online banking, or pay for goods using NFC. Often watch the trendies showing off by paying for coffees in the likes of Starbucks using that method, and it practically makes my hair stand on end seeing them do that.

What's the point in making it as complex as that? If it has to be installed on phone the begin with, with all those permissions, why not just send back the actual PIN that gets entered instead of all that camera, mic, tilt crap ?

Damn. I really need to take a look at the Xprivacy and afwall+ for my s3