Our takeMidnight Mimosa ships preinstalled in the firmware of cheap Android phones, silently installing apps, committing ad fraud, and turning devices into residential proxies. Check your phone's firmware provenance before trusting it with anything sensitive.Cyber Resilience desk
Sources (4)
- hackread · hackread
- bleeping · bleeping
- helpnet · helpnet
- hackernews · hackernews
What this means for you — Security leader:Low-cost Android devices may ship with Midnight Mimosa preinstalled in firmware, silently installing apps, committing ad fraud, and proxying traffic. Audit and re-image any such phones before connecting them to corporate networks.
What this means for you — Lean IT orgs:Cheap Android phones bought online or from discount stores can come with malware already built in that runs even after factory reset. Only buy phones from major brands with clean firmware and factory-reset any budget device before first use.
What this means for you — MSP:Midnight Mimosa ships in the firmware of low-cost Android phones, turning them into residential proxies and ad-fraud nodes. Advise clients against using unbranded cheap devices for work; re-flash or replace any already deployed.
What this means for you — Researcher:Midnight Mimosa is preinstalled in the firmware of low-cost Android phones, enabling silent app installs, ad fraud, and residential proxy use. Confirm any device model against the reported list before trusting it.