Hidden web code means hackers 'can wipe Samsung Galaxy S3'