The Silent Threat of Midnight Mimosa Malware

Bitdefender researchers reported a widespread Android malware campaign dubbed 'Midnight Mimosa' found preinstalled on thousands of budget smartphones across 150+ countries. The malware runs with system-level privileges, can install/uninstall apps, grant permissions, temporarily disable the Google Play Store to side-load malicious payloads used for ad fraud and automated clicks, and includes a TCP proxy capability that could turn devices into residential proxies; supply-chain evidence (device models and a firmware certificate name) was observed but the exact injection point and confirmed proxy traffic remain unverified.