Tag: samsung

2 Attack Reports | 0 Vulnerabilities

Attack reports

New Commercial-Grade Android Spyware in Exploit Chain Targeting Samsung Devices

Unit 42 researchers have uncovered LANDFALL, a previously unknown Android spyware family targeting Samsung Galaxy devices. The spyware exploits CVE-2025-21042, a zero-day vulnerability in Samsung's image processing library, to deliver commercial-grade surveillance capabilities. LANDFALL is embedded…
android
whatsapp
zero-day
spyware
samsung
CVE-2025-43300
CVE-2025-55177
2025-11-07
CVE-2025-21042
CVE-2025-21043
landfall
dng
commercial-grade
Published: November 7, 2025
Downloadable IOCs: 18

Post-Exploitation Activities Observed from the Samsung MagicINFO 9 Server Flaw

A vulnerability in Samsung MagicINFO 9 Server, a content management system for digital signage displays, has been exploited in limited incidents. Three separate attacks were observed, with two showing organized, identical commands and one appearing to be in a research phase. The attackers attempted…
vulnerability
exploitation
reconnaissance
post-exploitation
2025-05-10
digital signage
samsung
magicinfo
service installation
Published: May 10, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports