LANDFALL Android Spyware C2 Communication

Matt Brady@mbrady5299

•updated Nov 8, 2025•0•54

Detects network communication patterns associated with the LANDFALL Android spyware C2 servers. This includes connections to known malicious domains/IPs and specific HTTP POST requests used for beaconing.