The security of mobile devices may be at risk for Web borne attacks because of loose policies for processing URLs (Uniform Resource Locators), according to a report by security researcher Nitesh Dhajani. The way the iPhone s operating system, iOS, handles different URL formats could allow a remote attacker to launch a Web based attack that forced the phone to perform unauthorized actions, including phone calls, chats, or even transactions. The problem stems from the way iOS treats application specific URL schemes.
Source: https://threatpost.com/malicious-urls-pose-mobile-hijacking-risk-110910/74653/