There are no links you can trust, it's the internet.
Simply put it's enough for you to visit a website with a malformed AD.
I'm sure you guys know that clicking a link = making a request.
There is a solution inside certificates and encryption to the point where you need to "target" specific individuals to infect them but the state it is described in right now there is no way to consistently protect yourself. Considering that once you are infected you can't trust your device disconnecting from the internet isn't even a solution ...
To point out something that would enable you to know when / if you are infected, the solution is to have all your traffic monitored at all time. I'm working on doing that for myself right now and will bundle it somehow along the tutorial posts
I'm really excited about "HACKERLAND 2017" !!! It's going to be an interesting year
PS: If I had this hack the first thing I would do would be to find lots of websites (forums in special) where a lot of mobile users spend their time, make a really nice rich text signature that is actually just an image that is behind a processor that checks your user agent. I'm sure you can guess the rest
PS2: If the hack requires you to actually manually open the link in a new tab then yeah (maybe) it can be avoided if someone doesn't figure out some neat XSS / popup. Otherwise I think it's safe to say we're all doomed =))