LANDFALL C2 Communication from Mobile Apps
Detects outbound network connections from common messaging or gallery apps on Samsung Android devices to command and control (C2) infrastructure associated with the LANDFALL spyware.
Microsoft Sentinel (KQL)

