Modern operating systems sandbox apps so that they cant affect each other — in theory. In this way, the researchers were able to steal login credentials from the Gmail app, a Social Security number from the HR Block app, a credit-card number from the NewEgg app and a bank-check image from the Chase app. Only the Amazon app proved resistant, though not immune.