Samsung phones infected with 'Landfall' spyware through WhatsApp images - Tom's Guide

Tomsguide • November 12, 2025

Share: View original

This malware can infect Samsung devices through malicious WhatsApp images and it doesn't require any user interaction either.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Landfall Spyware Exploits Samsung Galaxy Zero-Day Vulnerability A sophisticated spyware named Landfall targeted Samsung Galaxy phones for nearly a year, exploiting a zero-day vulnerability in Samsung's image processing library. Discovered by Palo Alto Networks' Unit 42, the malware was delivered through malicious images sent via WhatsApp, affecting users primarily in the Middle East. The vulnerability, tracked as CVE-2025-21042, was active from July 2024 until it was patched in April 2025. 37 sources 55

Extracted Entities

Attack Types (1)

Companies (1)

Malware (1)

Platforms (1)