Samsung Galaxy phones were targeted by the sophisticated "LANDFALL" zero-day spyware, which stole personal data using a malformed image file.