Bitdefender finds preinstalled Android malware you can’t uninstall, seen in 150 countries
cross-posted from: https://infosec.pub/post/53450841
Bitdefender finds Midnight Mimosa, preinstalled Android malware on cheap MediaTek phones that fakes ad clicks, drops apps and builds a proxy botnet. Bitdefender researchers discovered a campaign called Midnight Mimosa involving preinstalled Android malware on low-cost phones from different brands that use MediaTek platforms. The malware is built into the device firmware and may be […]
https://securityaffairs.com/200759/malware/bitdefender-finds-preinstalled-android-malware-you-cant-uninstall-seen-in-150-countries.htmlOpen linkView original on lemmy.ca
8 replies
This is yet another reason why we must own our devices, from the ground up.
I encountered this on a cheap android tv box off Amazon. Found weird apks and after some digging found it emulated a pixel phone and performed fraudulent ad impressions using my home internet after I turned off my TV.
Returned it and reported to Amazon. The listing was gone in a day and reposted the next. 🤷♂️
How can I scan the phone for this? Especially the models they claim come pre installed to its firmware with it?
this has been a thing since forever tho. luckily(?) those devices also tend to have easy low level flashing and rooting methods
Is this included in HAD already?
Does good old Canta still work against these?
It can remove it for the current user. But, since the malware is embedded in the firmware it may get re-installed under a different name.