Mastodawn

ICYMI... 🫩🫠

https://unit42.paloaltonetworks.com/landfall-is-new-commercial-grade-android-spyware/
;
See also:
https://youtu.be/FDeMq8W4-sU
•
https://nvd.nist.gov/vuln/detail/CVE-2025-48561
•
https://www.pixnapping.com/pixnapping.pdf
•
Also;
“... As of October 2025, Google has not committed to patching our app list bypass vulnerability. They resolved our report as "won't fix (infeasible)".”

#android #landfall #malware #exploit #hardwarevulnerability #pixnapping #TAC_UCB #PixnappingAttack #maliciousapp #rendering #compositing #vsync #masking #encoding #surfaceflinger #callback

LANDFALL: New Commercial-Grade Android Spyware in Exploit Chain Targeting Samsung Devices

Commercial-grade LANDFALL spyware exploits CVE-2025-21042 in Samsung Android’s image processing library. The spyware was embedded in malicious DNG files.

Unit 42