PHYjacking: Physical Input Hijacking for Zero-Perm Auth Attack-Android[pdf] (ndss-symposium.org)

I'm glad to see more portmanteaus in attack paper titles, what an interesting attack.