Cheap Android Phones Found Shipping With Pre-Installed Ad-Fraud Malware

Security researchers at Bitdefender have identified a malware campaign affecting thousands of inexpensive Android smartphones that come compromised straight out of the box, according to reporting from The Record and Android Authority.

The malware, named Midnight Mimosa, is embedded in the device firmware and is present before the owner powers the phone on for the first time. Because it resides in the system partition, it cannot be uninstalled by typical means. Bitdefender told The Record that the code is on the phone before it is first switched on and cannot be removed.

According to Android Authority, the affected hardware includes devices from brands such as Doogee and Cubot. The malware is capable of installing additional apps, granting itself permissions, evading Google Play Protect, and enlisting infected phones as nodes in a botnet.