Sophisticated Spyware Targets Samsung Phones for Nearly a Year

Researchers at Unit 42, the threat intelligence arm of Palo Alto Networks, have revealed a sophisticated spyware known as Landfall that targeted Samsung Galaxy phones for nearly a year. The campaign leveraged a zero-day exploit in Samsung Android software to steal a raft of personal data, and it was active from July 2024 to April 2025. The underlying vulnerability, catalogued as CVE-2025-21042, has since been patched by Samsung. According to Unit 42, Landfall was used to target individuals in the Middle East for surveillance. "We believe that the attacks were likely targeted at specific groups, and the malware was designed to steal sensitive information," said a spokesperson for Unit 42. "The fact that the vulnerability was exploited for nearly a year highlights the importance of timely patching and updates for mobile devices." The discovery of Landfall has raised concerns about the growing threat of commercial spyware and its potential impact on global security. "The use of zero-day exploits to steal sensitive information is a serious concern, and it's essential that manufacturers and users take steps to protect themselves," said a cybersecurity expert. "The fact that this vulnerability was exploited for so long is a wake-up call for the industry to prioritize security and transparency." Landfall is not an isolated incident, and the use of commercial spyware has become a growing concern in recent years. In 2022, a report by the Citizen Lab revealed that a sophisticated spyware known as Pegasus was used to target journalists and activists in several countries. The use of commercial spyware has also been linked to human rights abuses and surveillance. The discovery of Landfall has led to calls for greater transparency and accountability in the tech industry. "The fact that this vulnerability was exploited for so long is a clear indication that the industry needs to do more to prioritize security and transparency," said a spokesperson for a human rights organization. "We urge manufacturers to take immediate action to protect their users and to provide greater transparency about the security of their products." The current status of the investigation into Landfall is unclear, but Unit 42 has promised to continue monitoring the situation and providing updates as more information becomes available. In the meantime, Samsung has issued a patch for its phones, and users are advised to update their devices as soon as possible to protect themselves from potential threats.