A researcher has found an exploit in the Google Chrome browser for mobile that could be used to launch phishing attacks.