Instagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages
- http://packetstormsecurity.com/files/166448/RTLO-Injection-URI-Spoofing.html
- https://github.com/zadewg/RIUS
No PoCs found on GitHub currently.