Samsung Spyware Shocker: Landfall Targets Galaxy Devices with Zero-Day Vulnerability
Samsung phone owners, beware! The Landfall spyware sneaks into your device through a WhatsApp photo. Exploiting CVE-2025-21042, this sneaky software can spy on you like a nosy neighbor. If you own a Galaxy, Fold, or Flip, it’s time to update! Palo Alto Networks urges caution, as this digital snoop festers in the Middle East and North Africa.
Hot Take:
Looks like the “Landfall” spyware is dropping in on Samsung users like an uninvited house guest who not only overstays but also rummages through your fridge and reads your diary. Samsung users might want to think twice before opening that “special” DNG image they received on WhatsApp, unless they’re into sharing their life’s playlist with some cyber snoop halfway across the globe!
Key Points:
- The “Landfall” spyware exploits a zero-day vulnerability (CVE-2025-21042) in Samsung’s image processing library.
- Targeted devices include Samsung Galaxy S22, S23, S24, Z Fold4, and Z Flip4.
- Spyware delivered through a zero-click exploit via WhatsApp using a specially crafted DNG image.
- The vulnerability was patched in April 2025, but exploitation occurred before that.
- Possible ties to UAE-linked Stealth Falcon group, but attribution remains uncertain.
Already a member? Log in here