\n Cyberwarfare \/ Nation-State Assaults<\/a> Adware Targets Samsung Galaxy Gadgets, Says Unit 42<\/span> Hackers used beforehand unknown business spy ware to surveil the actions of Samsung Galaxy machine house owners within the Center East, say safety researchers who posit the menace actor has connections to the United Arab Emirates.<\/p>\n See Additionally:<\/b> 5 Methods Exabeam Helps Remove Compromised Credential Blindspots<\/a><\/p>\n Researchers from Palo Alto Networks Unit 42 on Friday disclosed<\/a> spy ware they dub “Landfall,” writing that the producer patched<\/a> it in April. Tracked as CVE-2025-21042<\/a>, the flaw let hackers embed malware right into a DNG picture<\/a> file, presumably texted to the sufferer via WhatsApp.<\/p>\n It seems that machine infections did not require consumer interplay after hackers despatched the corrupted picture – constituting what’s often known as a zero-click assault. <\/p>\n Unit 42 would not attribute the malware to any specific actor, however researchers did discover similarities between Landfall’s command and management infrastructure and area registration patterns and infrastructure related to Stealth Falcon<\/a>, a menace actor that’s at the very least circumstantially related to the UAE authorities.<\/p>\n Builders of the spy ware could be Variston, a Barcelona-based vendor that reportedly<\/a> shut down earlier this yr. Unit 42 once more wrote that it will probably’t make certain, however stated evaluation of spy ware elements recommend a hyperlink to Variston, which has equipped tooling to UAE purchasers.<\/p>\n As soon as a tool has been contaminated, Landfall basically turns into a surveillance hub. The spy ware is able to microphone recording, location monitoring and exfiltrating private information along with stealing pictures, contacts and name logs. <\/p>\n
\n ,
\n Endpoint Safety<\/a>
\n ,
\n Fraud Administration & Cybercrime<\/a>\n <\/p>\n
\n
\n Greg Sirico<\/a> \u2022
\n November 7, 2025<\/span> \u00a0 \u00a0 <\/span><\/p>\n![\"Samsung](\"https:\/\/ismg-cdn.nyc3.cdn.digitaloceanspaces.com\/articles\/samsung-zero-day-flaw-exploited-by-landfall-spyware-image_large-8-a-29963.jpg\")