Researchers at Romania-based Bitdefender discovered malware preinstalled on thousands of inexpensive Android phones sold globally. The malicious software, named Midnight Mimosa, targets devices using MediaTek chips and cannot be removed by users. The malware operates with system-level privileges, allowing it to silently install applications, modify permissions, and execute code without approval. Over approximately two years, the campaign affected thousands of devices across more than 150 countries, with Mexico, France, and Italy experiencing the highest concentrations of infected phones.
The malware primarily generates revenue through advertising and click fraud schemes. It secretly installs disguised applications that display ads in invisible windows, creating fake impressions users never see. Researchers identified at least 32 such applications deployed by the preinstalled malware and discovered 13 additional malicious apps on Google Play Store using similar code. The affected phones are typically low-cost, white-label, or counterfeit devices resembling popular brands, sold through mainstream online marketplaces for approximately $180. Bitdefender could not determine who introduced the malware into the supply chain.
Source: Read the full story at The Record
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
