India, Nov. 8 -- Samsung Galaxy users were unknowingly exposed to a months-long hacking campaign that silently targeted their phones and extracted sensitive data, all without a single tap. Security researchers at Palo Alto Networks' Unit 42 have revealed a sophisticated Android spyware operation, dubbed "Landfall," that exploited a zero-day flaw in Samsung's software for nearly 10 months, from July 2024 to April 2025.

According to researchers, Landfall took advantage of a previously unknown vulnerability, CVE-2025-21042, allowing attackers to hijack a device simply by sending a specially crafted image, likely via a messaging app. The victim didn't need to click anything for the hack to work, making it a classic "zero-click" attack.

Sams...