LANDFALL Spyware Targets Mobile Devices

LANDFALL spyware samples observed in January and February 2025 targeted Samsung Galaxy devices, with potential victims in the Middle East. The campaign used malicious DNG images to exploit CVE-2025-21042 and enable surveillance. The images were likely delivered through WhatsApp, although the full infection chain and the threat actor responsible remain unconfirmed.