Tag: android

Samsung Mobile Flaw Exploited as Zero-Day to Deploy LANDFALL Android Spyware

Nov 8, 2025 7:19 AM

Tags: android, attack, cve, exploit, flaw, mobile, spyware, zero-day

A now-patched security flaw in Samsung Galaxy Android devices was exploited as a zero-day to deliver a “commercial-grade” Android spyware dubbed LANDFALL in targeted attacks in the Middle East.The activity involved the exploitation of CVE-2025-21042 (CVSS score: 8.8), an out-of-bounds write flaw in the “libimagecodec.quram.so” component that could allow remote attackers to execute arbitrary First…
New “LANDFALL” Android Malware Uses Samsung 0-Day Vulnerability Hidden in WhatsApp Images

Nov 8, 2025 7:19 AM

Tags: android, cve, cyber, cybersecurity, exploit, malware, spyware, vulnerability, zero-day

Cybersecurity researchers at Unit 42 have uncovered a sophisticated Android spyware campaign that exploited a previously unknown zero-day vulnerability in Samsung Galaxy devices. The malware, dubbed LANDFALL, leveraged a critical vulnerability in Samsung’s image processing library to deliver commercial-grade surveillance capabilities through maliciously crafted image files sent via WhatsApp. The LANDFALL campaign exploited CVE-2025-21042, a…
Samsung Mobile Flaw Exploited as Zero-Day to Deploy LANDFALL Android Spyware

Nov 8, 2025 7:19 AM

Tags: android, attack, cve, exploit, flaw, mobile, spyware, zero-day

A now-patched security flaw in Samsung Galaxy Android devices was exploited as a zero-day to deliver a “commercial-grade” Android spyware dubbed LANDFALL in targeted attacks in the Middle East.The activity involved the exploitation of CVE-2025-21042 (CVSS score: 8.8), an out-of-bounds write flaw in the “libimagecodec.quram.so” component that could allow remote attackers to execute arbitrary First…
New Microsoft Teams Feature Exposes Users to Phishing and Malware Risks

Nov 8, 2025 6:19 AM

Tags: android, cyber, email, linux, malware, microsoft, phishing, risk, update

Microsoft is poised to roll out a significant update to Teams, enabling users to initiate chats with anyone using just an email address”, even if the recipient isn’t a Teams user. While the feature, launching in targeted releases by early November 2025 and globally by January 2026, promises expanded connectivity across Android, desktop, iOS, Linux,…
Cybersecurity Snapshot: AI Will Take Center Stage in Cyber in 2026, Google Says, as MITRE Revamps ATTCK Framework

Nov 7, 2025 8:20 PM

Tags: access, ai, android, antivirus, api, apple, attack, authentication, business, cio, cisa, ciso, cloud, communications, container, control, credentials, cryptography, cve, cyber, cybercrime, cybersecurity, data, defense, detection, docker, endpoint, exploit, firewall, flaw, framework, google, governance, group, guide, hacker, identity, infrastructure, injection, Internet, kubernetes, leak, least-privilege, linux, malicious, malware, mfa, microsoft, mitigation, mitre, mobile, network, offense, oracle, programming, resilience, risk, risk-management, service, skills, soc, social-engineering, software, sophos, spam, strategy, supply-chain, switch, tactics, technology, threat, tool, unauthorized, update, vulnerability, windows, zero-day

Learn why Google expects AI to transform cyber defense and offense next year, and explore MITRE’s major update to the ATT&CK knowledge base. We also cover a new McKinsey playbook for agentic AI security, along with the latest on Microsoft Exchange protection and the CIS Benchmarks. Key takeaways Google is forecasting that AI will kick…
Cybersecurity Snapshot: AI Will Take Center Stage in Cyber in 2026, Google Says, as MITRE Revamps ATTCK Framework

Nov 7, 2025 8:20 PM

Tags: access, ai, android, antivirus, api, apple, attack, authentication, business, cio, cisa, ciso, cloud, communications, container, control, credentials, cryptography, cve, cyber, cybercrime, cybersecurity, data, defense, detection, docker, endpoint, exploit, firewall, flaw, framework, google, governance, group, guide, hacker, identity, infrastructure, injection, Internet, kubernetes, leak, least-privilege, linux, malicious, malware, mfa, microsoft, mitigation, mitre, mobile, network, offense, oracle, programming, resilience, risk, risk-management, service, skills, soc, social-engineering, software, sophos, spam, strategy, supply-chain, switch, tactics, technology, threat, tool, unauthorized, update, vulnerability, windows, zero-day

Learn why Google expects AI to transform cyber defense and offense next year, and explore MITRE’s major update to the ATT&CK knowledge base. We also cover a new McKinsey playbook for agentic AI security, along with the latest on Microsoft Exchange protection and the CIS Benchmarks. Key takeaways Google is forecasting that AI will kick…
New LandFall spyware exploited Samsung zero-day via WhatsApp messages

Nov 7, 2025 8:20 PM

Tags: android, exploit, malicious, spyware, threat, vulnerability, zero-day

A threat actor exploited a zero-day vulnerability in Samsung’s Android image processing library to deploy a previously unknown spyware called ‘LandFall’ using malicious images sent over WhatsApp. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-landfall-spyware-exploited-samsung-zero-day-via-whatsapp-messages/
Newly identified Android spyware appears to be from a commercial vendor

Nov 7, 2025 7:20 PM

Tags: android, spyware, zero-day

Researchers spotted a 9-month-long campaign involving previously undiscovered spyware they call LANDFALL, which leveraged a zero-day bug in Samsung Galaxy phones. First seen on therecord.media Jump to article: therecord.media/landfall-spyware-middle-east-appears-commercial-grade
Newly identified Android spyware appears to be from a commercial vendor

Nov 7, 2025 7:20 PM

Tags: android, spyware, zero-day

Researchers spotted a 9-month-long campaign involving previously undiscovered spyware they call LANDFALL, which leveraged a zero-day bug in Samsung Galaxy phones. First seen on therecord.media Jump to article: therecord.media/landfall-spyware-middle-east-appears-commercial-grade
Samsung Zero-Click Flaw Exploited to Deploy LANDFALL Android Spyware via WhatsApp

Nov 7, 2025 7:20 PM

Tags: android, attack, cve, exploit, flaw, spyware, zero-day

A now-patched security flaw in Samsung Galaxy Android devices was exploited as a zero-day to deliver a “commercial-grade” Android spyware dubbed LANDFALL in targeted attacks in the Middle East.The activity involved the exploitation of CVE-2025-21042 (CVSS score: 8.8), an out-of-bounds write flaw in the “libimagecodec.quram.so” component that could allow remote attackers to execute arbitrary First…
Herodotus Android Banking Trojan Takes Over Devices, Outsmarts Security Tools

Nov 7, 2025 2:20 PM

Tags: android, antivirus, banking, cyber, data, detection, finance, malware, mobile, service, social-engineering, threat, tool

A new threat has surfaced in the mobile banking landscape Herodotus, a sophisticated Android banking Trojan that has been wreaking havoc in recent weeks. Offered under the notorious Malware-as-a-Service (MaaS) model, Herodotus leverages social engineering and technical deception, evading detection by conventional antivirus solutions and putting users’ financial data at serious risk. Herodotus addressed victims…
Herodotus Android Banking Trojan Takes Over Devices, Outsmarts Security Tools

Nov 7, 2025 2:20 PM

Tags: android, antivirus, banking, cyber, data, detection, finance, malware, mobile, service, social-engineering, threat, tool

A new threat has surfaced in the mobile banking landscape Herodotus, a sophisticated Android banking Trojan that has been wreaking havoc in recent weeks. Offered under the notorious Malware-as-a-Service (MaaS) model, Herodotus leverages social engineering and technical deception, evading detection by conventional antivirus solutions and putting users’ financial data at serious risk. Herodotus addressed victims…
New Android Malware ‘Fantasy Hub’ Spies on Users’ Calls, Contacts, and Messages

Nov 7, 2025 1:19 PM

Tags: access, android, cyber, malware, mobile, russia, service, social-engineering, spyware, tactics, threat

Russian-based threat actors are actively distributing a sophisticated Android Remote Access Trojan called >>Fantasy Hub
New Android Malware ‘Fantasy Hub’ Spies on Users’ Calls, Contacts, and Messages

Nov 7, 2025 1:19 PM

Tags: access, android, cyber, malware, mobile, russia, service, social-engineering, spyware, tactics, threat

Russian-based threat actors are actively distributing a sophisticated Android Remote Access Trojan called >>Fantasy Hub
‘Landfall’ spyware abused zero-day to hack Samsung Galaxy phones

Nov 7, 2025 12:19 PM

Tags: android, middle-east, phone, spyware, zero-day

A newly identified Android spyware targeted Galaxy devices for close to a year, including users in the Middle East, researchers exclusively tell TechCrunch. First seen on techcrunch.com Jump to article: techcrunch.com/2025/11/07/landfall-spyware-abused-zero-day-to-hack-samsung-galaxy-phones/
Test der EFF: Diese AntiTools schützen am besten vor Spionage-Apps

Nov 7, 2025 10:19 AM

Tags: android, tool, virus

Mit Stalkerware lassen sich leicht Mitmenschen ausspionieren. Ein neuer Test zeigt, welche Anti-Virus-Tools für Android den besten Schutz bieten. First seen on golem.de Jump to article: www.golem.de/news/test-der-eff-diese-anti-virus-tools-schuetzen-am-besten-vor-spionage-apps-2511-201941.html
New NGate Malware Lets Hackers Drain ATMs Remotely

Nov 6, 2025 11:19 PM

Tags: android, hacker, malware, nfc, social-engineering

The NGate malware uses Android NFC relays and social engineering to let attackers withdraw cash from ATMs without stealing victims’ cards. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-ngate-malware-poland-atm/
Google Issues Emergency Chrome 142 Update to Fix Multiple High-Risk Vulnerabilities

Nov 6, 2025 4:19 PM

Tags: android, browser, chrome, control, google, linux, macOS, remote-code-execution, risk, update, vulnerability, windows

Google has rolled out an emergency update for its Chrome browser, version 142, to address a series of serious remote code execution (RCE) vulnerabilities that could allow attackers to take control of affected systems. The update, released on November 5, 2025, is being distributed gradually across desktop platforms, Windows, macOS, and Linux, as well as…
Google Issues Emergency Chrome 142 Update to Fix Multiple High-Risk Vulnerabilities

Nov 6, 2025 4:19 PM

Tags: android, browser, chrome, control, google, linux, macOS, remote-code-execution, risk, update, vulnerability, windows

Google has rolled out an emergency update for its Chrome browser, version 142, to address a series of serious remote code execution (RCE) vulnerabilities that could allow attackers to take control of affected systems. The update, released on November 5, 2025, is being distributed gradually across desktop platforms, Windows, macOS, and Linux, as well as…
Beware: 239 Dangerous Android Apps Found on Google Play with 40M+ Installs

Nov 5, 2025 3:19 PM

Tags: android, cyber, cybersecurity, google, infrastructure, iot, malicious, marketplace, mobile, threat

Cybersecurity threats targeting mobile devices and critical infrastructure have reached alarming new heights, according to Zscaler’s latest research. The latest findings from Zscaler, Inc. (NASDAQ: ZS) expose a sophisticated campaign by threat actors who have successfully infiltrated Google’s official app marketplace with hundreds of malicious applications. The company’s ThreatLabz 2025 Mobile, IoT, and OT Threat…
Beware: 239 Dangerous Android Apps Found on Google Play with 40M+ Installs

Nov 5, 2025 3:19 PM

Tags: android, cyber, cybersecurity, google, infrastructure, iot, malicious, marketplace, mobile, threat

Cybersecurity threats targeting mobile devices and critical infrastructure have reached alarming new heights, according to Zscaler’s latest research. The latest findings from Zscaler, Inc. (NASDAQ: ZS) expose a sophisticated campaign by threat actors who have successfully infiltrated Google’s official app marketplace with hundreds of malicious applications. The company’s ThreatLabz 2025 Mobile, IoT, and OT Threat…
Beware: 239 Dangerous Android Apps Found on Google Play with 40M+ Installs

Nov 5, 2025 3:19 PM

Tags: android, cyber, cybersecurity, google, infrastructure, iot, malicious, marketplace, mobile, threat

Cybersecurity threats targeting mobile devices and critical infrastructure have reached alarming new heights, according to Zscaler’s latest research. The latest findings from Zscaler, Inc. (NASDAQ: ZS) expose a sophisticated campaign by threat actors who have successfully infiltrated Google’s official app marketplace with hundreds of malicious applications. The company’s ThreatLabz 2025 Mobile, IoT, and OT Threat…
Beware: 239 Dangerous Android Apps Found on Google Play with 40M+ Installs

Nov 5, 2025 3:19 PM

Tags: android, cyber, cybersecurity, google, infrastructure, iot, malicious, marketplace, mobile, threat

Cybersecurity threats targeting mobile devices and critical infrastructure have reached alarming new heights, according to Zscaler’s latest research. The latest findings from Zscaler, Inc. (NASDAQ: ZS) expose a sophisticated campaign by threat actors who have successfully infiltrated Google’s official app marketplace with hundreds of malicious applications. The company’s ThreatLabz 2025 Mobile, IoT, and OT Threat…
NGate Malware Enables Unauthorized Cash Withdrawals at ATMs Using Victims’ Payment Cards

Nov 5, 2025 1:19 PM

Tags: android, attack, communications, cyber, exploit, malware, nfc, phone, technology, threat, unauthorized

NGate represents a sophisticated Android-based threat that exploits NFC technology to enable unauthorized ATM cash withdrawals without physically stealing payment cards. Rather than stealing cards outright, threat actors use an ingenious relay attack that intercepts the card’s NFC communications from a victim’s Android phone and transmits them to an attacker-controlled device positioned at an ATM,…
NGate Malware Enables Unauthorized Cash Withdrawals at ATMs Using Victims’ Payment Cards

Nov 5, 2025 1:19 PM

Tags: android, attack, communications, cyber, exploit, malware, nfc, phone, technology, threat, unauthorized

NGate represents a sophisticated Android-based threat that exploits NFC technology to enable unauthorized ATM cash withdrawals without physically stealing payment cards. Rather than stealing cards outright, threat actors use an ingenious relay attack that intercepts the card’s NFC communications from a victim’s Android phone and transmits them to an attacker-controlled device positioned at an ATM,…
Securing the Open Android Ecosystem with Samsung Knox

Nov 5, 2025 1:19 PM

Tags: android, business, data, phone

Raise your hand if you’ve heard the myth, “Android isn’t secure.”Android phones, such as the Samsung Galaxy, unlock new ways of working. But, as an IT admin, you may worry about the security”, after all, work data is critical.However, outdated concerns can hold your business back from unlocking its full potential. The truth is, with…
Hundreds of Malware-Laden Apps Downloaded 42 Million Times From Google Play

Nov 5, 2025 11:19 AM

Tags: android, google, malicious, malware

Zscaler estimates 239 malicious Android apps made it onto the official Play store over the past year First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/apps-download-41-million-times/
Global Spies Use ZipperDown and Android Zero-Days for 1-Click Email Client RCE and Account Takeover

Nov 5, 2025 5:19 AM

Tags: android, email, rce, remote-code-execution, zero-day

The post Global Spies Use ZipperDown and Android Zero-Days for 1-Click Email Client RCE and Account Takeover appeared first on Daily CyberSecurity. First seen on securityonline.info Jump to article: securityonline.info/global-spies-use-zipperdown-and-android-zero-days-for-1-click-email-client-rce-and-account-takeover/
Malicious Android apps on Google Play downloaded 42 million times

Nov 4, 2025 10:20 PM

Tags: android, cloud, google, malicious

Hundreds of malicious Android apps on Google Play were downloaded more than 40 million times between June 2024 and May 2025, notes a report from cloud security company Zscaler. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malicious-android-apps-on-google-play-downloaded-42-million-times/
Google fixed a critical remote code execution in Android

Nov 4, 2025 9:20 PM

Tags: android, flaw, google, remote-code-execution, update, vulnerability

Google’s November 2025 Android update fixes two flaws in the System component, including a critical remote code execution issue. Google’s November 2025 Android security updates addressed two vulnerabilities impacting the System component. The fixes are included in the 2025-11-01 security patch level, the only patch level released this month by the IT giant. >>The most…