LANDFALL spyware exploited a Samsung Galaxy flaw (CVE-2025-21042) via WhatsApp images before April 2025 patch.