LANDFALL Spyware DNG Image File Creation

Duo Tech@duotech

•updated Nov 10, 2025•2•0•34

Detects the creation of potential LANDFALL spyware delivery files. These are malformed DNG image files, often with filenames suggesting delivery via WhatsApp, used to exploit CVE-2025-21042.