But until now, based on the latest research in the IEEE Security & Privacy paper, everyone has believed that malicious apps attempting to carry out overlay attacks must overcome two significant hurdles to be successful:  These are significant mitigating factors and so overlay attacks haven’t been reckoned a serious threat.