Re:Journalist’s phone hacked: all he had to do was visit any...
by lazyjones on Tuesday June 23, 2020 @09:08PM
(#23622702)
But "any website" here seems to be "any non-https website", so this is more likely: a) router or baseband-processor hack plus b) malicious JS injection into unencrypted HTML plus c) browser vulnerability via JS.
No need to bypass encryption.