The hardware vulnerability - found primarily in budget handsets - makes it possible to steal sensitive user data, including crypto wallet seed phrases, in less than a minute.
Victims may remain unaware that their UPI account has been taken over on another device as the attack happens silently, as per researchers.