Malware-Infected Low-Cost Android Devices Exploit Firmware to Function as Residential Proxies

Low-cost Android phones using MediaTek chips have been found with preinstalled malware in firmware, enabling cybercriminals to install apps, perform ad fraud, and convert devices into residential proxies. The threat, tracked as Midnight Mimosa by Bitdefender, affects multiple brands and exploits hardware-level vulnerabilities.

Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad actors to covertly install apps, conduct ad fraud, and turn devices into residential proxies.

The activity, which targets Android devices built on MediaTek platforms across several brands, is being tracked by Bitdefender under the moniker Midnight Mimosa.

The preinstalled

Read original article