Security researchers have uncovered an attack that infected Android phones through compromised websites, exploiting vulnerabilities in Chrome and Qualcomm’s Adreno GPU drivers. The malware could steal browser cookies, saved passwords, browsing history and Wi-Fi credentials. The campaign targeted Chrome versions 139–145 and was linked to the Russian hacking group APT29. Both vulnerabilities have since been patched, so keeping Chrome and Android security updates current protects against the attacks.
Source: Android Authority