Skip to main content
عربي
logo

NCSC-TAD-2511-001

Severity Level: Critical
Vulnerability

Reference No.: NCSC-TAD-2511-001CVSS 0

LANDFALL Spyware Targets Mobile Devices

Threat Type:
N/A
TLP:
CLEAR
CVE:
CVE-2025-21042

Overview

LANDFALL spyware samples observed in January and February 2025 targeted Samsung Galaxy devices, with potential victims in the Middle East. The campaign used malicious DNG images to exploit CVE-2025-21042 and enable surveillance. The images were likely delivered through WhatsApp, although the full infection chain and the threat actor responsible remain unconfirmed.

Affected Technologies

  • Samsung Galaxy

Mitigation and Immediate Actions

  1. 01

    Apply the latest Samsung security updates, including the fix for CVE-2025-21042 released in April 2025.

References