logo

Commercial-Grade Mobile Spyware “LANDFALL” Underscores Evolving Mobile Threats

ID: 456f5d80-7ba6-5a92-a106-fbd929cdd7ec

STIX ID: report--456f5d80-7ba6-5a92-a106-fbd929cdd7ec

Feed Name: Zimperium Blog

Threat Score
85/100

Date Published: 2025-11-24

Date Updated: 2026-05-01

...
...

LANDFALL is a sophisticated Android spyware campaign that exploited a zero-day flaw in a major smartphone image-processing library by embedding malicious payloads in malformed DNG images and using a zero-click exploit chain delivered through messaging apps; the spyware grants access to microphone, location, call logs, photos and contacts while bypassing conventional antivirus defenses, highlighting significant risks to BYOD and unmanaged mobile environments.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.