'Landfall' Malware Targeted Samsung Galaxy Users

Darkreading •Jai Vijayan, Contributing Writer • November 7, 2025

The tool let its operators secretly record conversations, track device locations, capture photos, collect contacts, and perform other surveillance on compromised devices.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Landfall Spyware Exploits Samsung Galaxy Zero-Day Vulnerability Landfall, a sophisticated Android spyware, targeted Samsung Galaxy phones for nearly a year, exploiting a zero-day vulnerability (CVE-2025-21042) in Samsung's image-processing library. The campaign, uncovered by Palo Alto Networks' Unit 42, likely affected users in the Middle East, allowing attackers to install surveillance software without user interaction. The vulnerability was first detected in July 2024 and was patched in April 2025. 47 sources 36

'Landfall' Malware Targeted Samsung Galaxy Users

The full story

Extracted Entities

Attack Types (1)

Malware (1)