Using a pair of zero day vulnerabilities, a team of security researchers from U.K.-based MWR Labs hacked into a Samsung Galaxy S3 phone running Android 4.0.4 by beaming an exploit via NFC (Near Field Communications) The same vulnerability could also be exploited through other attack vectors, such as malicious websites or e-mail attachments. The payload is very advanced, so attackers can “basically do anything on that phone,” the researchers said. A Dutch research firm hacked into Apple’s iPhone 4S from scratch using a WebKit vulnerability to launch a drive-by download.
Source: https://thehackernews.com/2012/09/android-404-multiple-zero-day.html