
Although the first episodes of infection were noted in July 2024, Samsung only eliminated the vulnerability in April 2025. Malware files were uploaded to VirusTotal by users from Morocco, Iran, Iraq, and Turkey. Samara Online 24 The Landfall code names Galaxy S22, S23, S24 models and a number of Z variants. Samsung has not yet commented on the investigation.