Android Devices at Risk: Browser-Based Hacker Attack Discovered

How the attack worked

Security researchers have identified a dangerous new hacking campaign targeting smartphones running the Android operating system. The attackers utilized specifically crafted or compromised websites, where simply visiting the page was enough to infect a device. Unlike other types of attacks, the user did not need to click on suspicious links, install applications, or grant permissions. Opening an infected website within an outdated version of Google Chrome was sufficient.

The attack was two-staged and relied on several critical vulnerabilities. First, hackers exploited a flaw in Chrome (CVE-2026-3910), which allowed them to execute code within the browser. The process then moved to a more complex phase: the attackers exploited a vulnerability in the Qualcomm Adreno GPU driver (CVE-2025-27038). This allowed them to escape the browser's "sandbox"—a security environment that forces programs to run in isolation from the system—and gain access to the smartphone's data files.

What data was stolen

Because the vulnerability is directly linked to Qualcomm Adreno graphics processors, the attack primarily targeted Android devices powered by Snapdragon chipsets. The attack affected Chrome versions 139 through 145. In the event of a successful breach, hackers could steal sensitive information, such as:

• Browser cookies;
• Saved authentication data (logins and passwords);
• Browsing history;
• Wi-Fi network passwords.

How to protect yourself

It is important to note that both vulnerabilities have already been addressed through relevant software updates. This means that users with the latest version of Chrome installed and the most recent security patches applied are fully protected. This incident once again highlights how critical it is to install system updates in a timely manner.

For users in regions with a high number of Android devices, such as Georgia, such threats often go unnoticed. It is recommended to periodically check for software updates in the "Settings" menu and ensure that Google Chrome is updated via the Google Play Store. Additionally, avoid visiting suspicious websites, especially if the browser displays a warning regarding site security.