A recent analysis uncovered a sophisticated Android spyware campaign dubbed “LANDFALL” that exploited a zero-day flaw in a major smartphone manufacturer’s image-processing library to deliver a full-scale espionage tool. The attack disguised the payload within malformed DNG image files, evidently disseminated via messaging apps, and bypassed conventional antivirus defenses by leveraging a zero-click exploit chain. Once installed, the spyware gained privileges to access microphone, location, call-logs, photos and contacts—demonstrating how mobile endpoints are now prime targets for high-stakes intrusion. The findings reaffirm that securing mobile devices—especially in environments with BYOD, unmanaged apps, or hybrid access—is essential for modern threat-resilient cybersecurity strategy.
Read the full analysis here.
© 2025 Zimperium. All Rights Reserved. Privacy Settings Modern Slavery Act Statement