Midnight Mimosa Malware Found Preinstalled on Low-Cost Android Phones
Malware dubbed Midnight Mimosa found preinstalled on low-cost Android phones.
Researchers have discovered a new strain of malware, named Midnight Mimosa, that is preinstalled on low-cost Android smartphones. This malware is embedded directly into the device's firmware, meaning it is present before the user even turns the phone on. The implications for user security and privacy are significant, as the malware can potentially steal sensitive data and perform unauthorized actions from the moment the device is activated.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Android phones?
Get an email when a new story names Android phones, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonMidnight Mimosa represents a classic supply chain attack where malicious code is embedded into device firmware before the product ever reaches the consumer, bypassing traditional endpoint security entirely. Because the malware exists at the firmware level, standard antivirus tools and factory resets may be ineffective at removing it. This attack vector is particularly dangerous for cost-conscious consumers and organizations that procure low-cost devices without rigorous hardware vetting. The compromise begins at the moment of activation, giving attackers immediate and persistent access to sensitive data with no user action required.
What helps against this
How we list vendors
- Cyber asset inventory
You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Midnight Mimosa