Back Feeds.Feedburner

LANDFALL Spyware Targeted Samsung Galaxy Phones via Malicious Images

Feeds.Feedburner •Deeba Ahmed • November 10, 2025

Unit 42 discovered LANDFALL, commercial-grade Android spyware, which used a hidden image vulnerability (CVE-2025-21042) to remotely spy on Samsung Galaxy users via WhatsApp. Update your phone now.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Landfall Spyware Exploits Samsung Galaxy Zero-Day Vulnerability A sophisticated spyware named Landfall targeted Samsung Galaxy phones for nearly a year, exploiting a zero-day vulnerability in Samsung's image processing library. Discovered by Palo Alto Networks' Unit 42, the malware was delivered through malicious images sent via WhatsApp, affecting users primarily in the Middle East. The vulnerability, tracked as CVE-2025-21042, was active from July 2024 until it was patched in April 2025. 37 sources 55

Extracted Entities

LANDFALL Spyware Targeted Samsung Galaxy Phones via Malicious Images

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Malware (1)

Platforms (2)