LandFall campaign — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
November 7, 2025
Last Seen
November 7, 2025

LandFall is a mobile-focused spyware campaign observed deploying covert surveillance payloads on target devices.

Overview

LandFall is a mobile-focused spyware campaign observed deploying covert surveillance payloads on target devices. The latest report indicates LandFall exploits a Samsung zero-day vulnerability to install spyware, highlighting its use of zero-days against Samsung devices and increasing the threat to mobile users. This underscores the rising risk of targeted mobile espionage and the need for robust mobile threat monitoring.

Related Threat Clusters

  • Landfall Spyware Exploits Samsung Galaxy Zero-Day Vulnerability

    A sophisticated spyware named Landfall targeted Samsung Galaxy phones for nearly a year, exploiting a zero-day vulnerability in Samsung's image processing library. Discovered by Palo Alto Networks' Unit 42, the malware…

    37 articles · Updated November 12, 2025
  • Landfall Spyware Exploits Samsung Galaxy Zero-Day Vulnerability

    Landfall, a sophisticated Android spyware, targeted Samsung Galaxy phones for nearly a year, exploiting a zero-day vulnerability (CVE-2025-21042) in Samsung's image-processing library. The campaign, uncovered by Palo…

    47 articles · Updated November 10, 2025

Recent Intelligence Reports

  • New LandFall spyware exploited Samsung zero — Bleepingcomputer · November 7, 2025

CVSS v3.1 Breakdown