Landfall Spyware Exploits Samsung Galaxy Zero-Day Vulnerability

A sophisticated spyware named Landfall targeted Samsung Galaxy phones for nearly a year, exploiting a zero-day vulnerability in Samsung's image processing library. Discovered by Palo Alto Networks' Unit 42, the malware was delivered through malicious images sent via WhatsApp, affecting users primarily in the Middle East. The vulnerability, tracked as CVE-2025-21042, was active from July 2024 until it was patched in April 2025.