Not one of these is able to spread by itself, always the user of the phone has to accept installing of the virus.

It’s the first time I’ve heard of any activity coming from there.

This is enough to invoke the exploit and infect the machine.

The vulnerability probably affects more computers than any other security vulnerability, ever.

But at least you know someone on your premises has an infected phone.