I've been using Android since 2010. In those days, there wasn't as much that you couldn't do without needing to gain full system administrator access (or replace the stock operating system entirely).
For Android, the attackers targeted Chrome versions 139 through 145, excluding version 143, using two patched vulnerabilities. The resulting payload, called AndroSnitch, sought browser cookies, saved ...