Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies
Summary
Low-cost Android smartphones, particularly those built on MediaTek platforms and across various brands, are being shipped with preinstalled malware. This malicious software, tracked by Bitdefender as Midnight Mimosa, enables attackers to covertly install apps, commit ad fraud, and transform devices into residential proxies.
IFF Assessment
The discovery of preinstalled malware on consumer devices that can be exploited for malicious purposes represents a threat to users and the broader internet infrastructure.
Defender Context
Defenders should be aware that low-cost Android devices, especially those using MediaTek chipsets, may come with preinstalled malware. This highlights the importance of supply chain security and thorough device vetting before deployment, as such devices can be leveraged for botnets, ad fraud, and proxying malicious traffic.