Cybersecurity researchers at Bitdefender have uncovered a highly sophisticated Android malware campaign, dubbed “Midnight Mimosa,” which comes pre-installed directly on the firmware of thousands of low-cost mobile devices.
Unlike traditional cyberattacks that rely on deceptive phishing links or the accidental downloading of malicious applications, this malware is deeply embedded within the system partition of the devices at the factory level.
This means that the smartphone is already fully compromised straight out of the box, long before the end-user even turns it on or completes the initial setup process.
Operating primarily on low-cost devices built on MediaTek platforms across more than 150 countries, Midnight Mimosa is capable of executing widespread ad fraud, operating as proxyware, and silently installing additional malicious applications in the background without the owner’s knowledge or consent.
Because the threat is baked directly into the operating system, it is incredibly difficult for standard end-users to detect or remove. This unprecedented supply-chain attack highlights the immense dangers of gray-market electronics and underscores exactly why strict vendor screening and secure manufacturing pipelines are absolute necessities in today’s digital landscape.
Read bitdefender.com article for more information.
