We've been trying to murder a (UK-based) GS III here at Engadget, but with no luck as yet -- we can cause the malicious digits to appear in the dialer, but we can't force the stock browser to visit them as a URL, even when trying a bit of URL forwarding and QR code trickery.
Want to know if Carrier IQ, the dialer- and location-sniffing software installed in millions of phones, is being used by the FBI for law enforcement investigations?