Researchers from Google's Threat Analysis Group (TAG) have discovered two separate, highly-targeted campaigns that use various, unpatched zero-day exploits against users of both iPhone and Android smartphones to deploy spyware.(Chrome also)

initial access attempts that affect both Android and iOS that were delivered via bit.ly links sent over SMS

Also Samsung Browser Cyber-Espionage Campaign includes a complete exploit chain

#CoSoSec

https://blog.google/threat-analysis-group/spyware-vendors-use-0-days-and-n-days-against-popular-platforms/