A newly discovered spyware campaign, dubbed LANDFALL, has been targeting Samsung Galaxy users in Morocco and beyond, exploiting a zero-day vulnerability in WhatsApp's image-sharing feature to infiltrate devices without user interaction. Uncovered by Palo Alto Networks' Unit 42, this advanced malware has been active since mid-2024, allowing attackers to conduct extensive surveillance before Samsung's recent patch in 2025.
Amid rising cyber threats, the General Directorate of Information Systems Security has issued a warning about a new virus known as «BTMOB RAT», which targets Android phones in Morocco. In this interview with cybersecurity expert Hassan Kherjouj, we explore the nature of this dangerous malware, the vulnerabilities it exploits, and the most effective ways users can protect themselves.
In a report released Thursday, Amnesty International revealed that two Moroccan human rights defenders have been targeted, since 2017, with malicious SMS attacks aimed at installing an Israeli-developed spyware.