
Midnight Mimosa Android Malware Compromises Firmware of MediaTek Phones
Researchers disclosed that the Midnight Mimosa campaign infected thousands of devices across 150 countries by embedding malicious code directly into device firmware.
Everything Threat Times has reported about Firmware Malware: 6 stories, newest first. Part of our Cyber Attacks coverage.

Researchers disclosed that the Midnight Mimosa campaign infected thousands of devices across 150 countries by embedding malicious code directly into device firmware.

Security researchers report that budget Android devices from brands like Doogee and Cubot were shipped with preinstalled malware designed to generate fraudulent ad revenue.

Bitdefender researchers found the malware embedded in device firmware, granting operators silent control over low-cost Android phones before users power them on.

Firmware malware resides below the operating system, allowing it to survive disk wipes, OS reinstalls, and even hardware swaps by persisting in the device's read-only memory layers.

Researchers report that budget Android devices are shipping with pre-installed malware that turns phones into residential proxies and performs ad fraud.

A malware campaign named Midnight Mimosa is pre-baked into the firmware of low-cost Android devices sold in more than 150 countries, according to SecurityWeek.