
Credit: Ryan Haines / Android Authority
TL;DR
- A sophisticated Android spyware called “LANDFALL” targeted Samsung Galaxy devices via a zero-day vulnerability in the company’s image parsing library.
- LANDFALL was deployed through malicious DNG images sent via messaging apps. It enabled attackers to steal sensitive user data without user interaction and while evading detection.
- The issue affected several high-profile Galaxy models in 2024 and was patched by Samsung in April 2025.
Samsung Galaxy phones are among the best Android phones available, particularly if you prioritize robust security, as they offer extended software update support and regular security patches. However, even the best can fall victim to malware at times, and a new report suggests that Samsung Galaxy phones were targeted with the “LANDFALL” spyware. This sophisticated zero-day attack could steal personal data and has reportedly been used in the wild.
Don’t want to miss the best from Android Authority?