Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies

Low-cost Android phones are shipping with preinstalled malware that lets attackers covertly install apps, commit ad fraud, and turn devices into residential proxies. Bitdefender tracks the activity as Midnight Mimosa, targeting MediaTek-based devices across several brands. The malicious firmware is baked in at the factory, making removal difficult for users.