Technology 11/10: Samsung data leaked, China rises in chip industry

Samsung Galaxy devices have been hacked for nearly a year, while China asserts its role in the global semiconductor supply chain.

Spyware “Landfall” has been rampant on Samsung for nearly a year

Researchers at Unit 42 (of Palo Alto Networks) discovered a sophisticated spyware called Landfall that has been attacking Samsung Galaxy devices for nearly a year. This software exploits a zero-day vulnerability in Samsung's Android operating system to steal users' personal data.

How Landfall spyware infiltrates Samsung phones. (Source: Unit 42)

Landfall is a zero-click attack, meaning that the user does not need to do anything to be compromised. Hackers use modified DNG image files, which contain hidden malware. When the system processes the image, the malware automatically activates, changing the SELinux policy to expand the attacker's access.

The malware targets the Galaxy S22, S23, S24, Z Flip 4, and Z Fold 4 series. Once infiltrated, it sends device information to a server and allows attackers to access data such as contacts, apps, files, browsing history, and even activate the camera and microphone to spy on users.

According to data from VirusTotal, Landfall was active between 2024 and 2025, mainly in Iraq, Iran, Türkiye and Morocco. Samsung released a patch in April 2025, but has only now released details of the vulnerability.

Experts warn that even though the initial campaign has ended, Landfall's attack method can be reused if users have not updated their devices.

Washington Post victim of Oracle cyber attack

The Washington Post said it was one of the victims of a large-scale cyber attack targeting the Oracle E-Business Suite platform. The information was announced on November 8, but the newspaper did not disclose details about the extent of the damage.

The CL0P ransomware group, notorious for its extortion attacks, has published a list of victims on its website, including the Washington Post, in what is seen as a pressure tactic to force organizations to pay ransoms.

The Washington Post said it was one of the victims of a large-scale cyber attack involving Oracle software. (Source: Reuters)

The campaign is believed to target Oracle's E-Business Suite, which is used by many businesses to manage customers, suppliers, manufacturing and logistics. Google previously warned that more than 100 companies may have been affected.

Oracle and CL0P have not commented. Experts say this is part of a large-scale cyber extortion campaign that could have a ripple effect across many business sectors.

ASML affirms China's special role in the chip market

ASML Holding NV (Netherlands) – the world's leading supplier of chip manufacturing equipment – ​​affirms that China is a key market in its global growth strategy.

ASML's booth at the 8th China International Import Expo in Shanghai. (Source: Chinadaily)

Shen Bo, Executive Vice President and President of ASML China, said the company is committed to continuing to serve customers there “within the framework of applicable laws and regulations.”

According to the Q3 financial report, ASML expects China to account for more than 25% of total revenue by 2025. Mr. Shen emphasized that the semiconductor industry is inherently cyclical, so fluctuations are normal. The proportion of revenue from China has increased over the past two years as the company is dealing with a large backlog of orders.

ASML believes that China remains an integral part of the global semiconductor supply chain, with a prominent role in the Internet of Things (IoT), automotive electronics and consumer devices. The company continues to maintain a positive view on China's mainstream semiconductor technology capabilities.

Mr. Quang

Source: https://vtcnews.vn/cong-nghe-10-11-samsung-bi-ro-ri-du-lieu-trung-quoc-troi-day-trong-nganh-chip-ar986253.html