Android phones not running the latest Oreo OS are vulnerable to a high-severity “toast” overlay attack.
Source: Threadpost