Back Redhotcyber

WhatsApp used to spread LANDFALL, the new spyware for Android Samsung

Redhotcyber • November 9, 2025

Share: View original

Researchers have identified LANDFALL, a new family of Android spyware exploited via zero - day vulnerabilities in Samsung devices.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Landfall Spyware Exploits Samsung Galaxy Zero-Day Vulnerability Landfall, a sophisticated Android spyware, targeted Samsung Galaxy phones for nearly a year, exploiting a zero-day vulnerability (CVE-2025-21042) in Samsung's image-processing library. The campaign, uncovered by Palo Alto Networks' Unit 42, likely affected users in the Middle East, allowing attackers to install surveillance software without user interaction. The vulnerability was first detected in July 2024 and was patched in April 2025. 47 sources 36

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (2)

Android WhatsApp