Researchers launched a Proof-of-Concept attack on two Android mobile phones and an embedded system board.

An attacker can pick up the profile picture, username and the “likes” of unsuspecting visitors who find themselves landing on a malicious website.