Hackers broke into Android phones through Chrome without a single tap

Hackers have been breaking into Android phones through Google's Chrome browser without the owner tapping or approving anything. According to Android Authority, the attack linked two separate weaknesses: a bug in Chrome and a flaw in the graphics chips made by Qualcomm under the Snapdragon name.

What changed

Security attacks often work by chaining. One flaw gets the attacker a foothold, and a second flaw lets them go deeper. Here, the Chrome bug was one link and the Snapdragon graphics flaw was the other. Together they let attackers get into a phone with no warning and no action from the user.

Who it affects

Anyone who uses Chrome on an Android phone could be exposed, especially on phones with Snapdragon chips. Those chips power many Android phones, so the risk reaches well beyond one brand. If your phone is fully up to date, you are in a much better spot than someone who has been ignoring update notices.

Why it matters

A phone holds photos, email, saved logins and banking apps. A break-in that needs no tap means ordinary caution, like avoiding odd links, may not be enough. Updates are the real defense.

What to do

The alert box above lists the steps. In short, update Chrome, install the latest Android security patch, restart, and turn on automatic updates.

What is not known yet

The material available does not say how many phones were hit, who the attackers were, or which phone models are affected. It also does not say when each fix reaches each phone. Phone makers often release patches on different schedules, so check for updates again over the coming weeks.