Midnight Mimosa: Preinstalled Android Firmware Malware Turns Low-Cost Phones into Ad-Fraud Bots and Potential Proxy Nodes
Bitdefender documented Midnight Mimosa, an Android malware campaign that embeds a platform-signed malicious system app in the firmware of low-cost, MediaTek-based handsets and counterfeit flagship models before they reach buyers. Thousands of infected devices were observed in more than 150 countries over roughly two years. The implant dri…