I accidentally opened an adult website on my Android phone using the fully updated Samsung Internet browser. My phone's latest security patch is from March 2025. I became concerned after reading an old review claiming that someone had picked up a Trojan from the site, although the review was around 13 years old.
After closing the tab, I noticed some lag while opening my gallery. Later that day, Instagram showed that I had followed an unfamiliar account, even though I don't remember doing so. I ran scans with Malwarebytes, Bitdefender, and Samsung's built-in security tools, but they found nothing. I also checked for unfamiliar apps and new files without finding anything suspicious.
Could this have been a drive-by download or another type of infection that the scans missed, or are the lag and Instagram follow more likely to be unrelated coincidences?
2 Answers
If you only opened the page, closed it, and didn’t install or run an APK, the phone is very likely fine. Modern Android browsers have strong protections, and a website generally can’t silently install a normal app without user interaction. The scans being clean and the lack of unfamiliar apps or files are both reassuring. The lag and unexpected Instagram follow were probably unrelated, or the follow may have happened earlier than you remember.
A drive-by or zero-click exploit is technically possible, but it would be exceptionally rare—especially for an ordinary visitor rather than a specifically targeted person. Those vulnerabilities are valuable and are generally used selectively. Keep Android and your browser updated, avoid installing files from websites, and review your Instagram account activity and login sessions if you want additional reassurance.
Thanks, that makes me feel better. I’ll check the Instagram activity and keep everything updated.