Hidden Malware Discovered in Budget Android Devices Across 150 Countries
What Happened
Cybersecurity firm Bitdefender has uncovered a malware campaign dubbed Midnight Mimosa, which comes preinstalled in the firmware of some low-cost Android smartphones. The malware activates from the moment the device is first switched on, operates with system-level privileges, and can silently install apps, gather device information, carry out ad fraud, and turn infected phones into botnet or proxy nodes. Researchers observed infections on thousands of devices across more than 150 countries.
Key Takeaways
Because the malware is embedded in the phone's firmware, it cannot be easily removed through normal uninstall methods or factory resets, raising concerns about supply-chain security in low-cost and counterfeit Android devices.