Zero-day exploits in apps like WhatsApp and the phones OS. Recieving and reading a message that has malicious code attached can compromised a device. Even iPhones have been vulnerable. These exploits are valuable and temporary though, so get used on high value targets.
https://press.coop/directory helps for following news feeds 👍