Attack uses two vulnerabilities in Google Chrome and Qualcomm driver, Rozetked reports
Published:

Summary
An attack is exploiting two vulnerabilities: one in Google Chrome, CVE-2026-3910, and another in the Qualcomm Adreno graphics driver, CVE-2025-27038, Rozetked reports. After visiting a compromised webpage, hackers install malware called AndroSnitch, Rozetked reports. AndroSnitch steals Chrome cookies, saved login data, browsing history, and Wi-Fi configuration files containing network passwords, Rozetked reports.
Key facts
Each fact shows how far it is verified and the sources behind it.
According to preliminary information
DevelopingPreliminary information; it may change as the story develops.
Rozetked states: An attack is exploiting two vulnerabilities: one in Google Chrome, CVE-2026-3910, and another in the Qualcomm Adreno graphics driver, CVE-2025-27038.
Sources for this fact
Supports
1 source: Rozetked
Rozetked states: After visiting a compromised webpage, hackers install malware called AndroSnitch.
Sources for this fact
Supports
1 source: Rozetked
Rozetked states: AndroSnitch steals Chrome cookies, saved login data, browsing history, and Wi-Fi configuration files containing network passwords.
Sources for this fact
Supports
1 source: Rozetked
Rozetked states: The attack is only relevant for Chrome versions 139 to 145, but it does not work in version 143.
Sources for this fact
Supports
1 source: Rozetked
Sources
Every source of this story with its tier and affiliation. Several reports by one source count as one.
Rozetked
T2 · established media · company · international
Versions and corrections
Published:
Minor edits such as typos create a new version without a notice. All corrections


.jpg&w=3840&q=75)

