Zero-day in Android phone chips under active attack