cross-posted from: https://infosec.pub/post/53450841
Bitdefender finds Midnight Mimosa, preinstalled Android malware on cheap MediaTek phones that fakes ad clicks, drops apps and builds a proxy botnet. Bitdefender researchers discovered a campaign called Midnight Mimosa involving preinstalled Android malware on low-cost phones from different brands that use MediaTek platforms. The malware is built into the device firmware and may be […]
I encountered this on a cheap android tv box off Amazon. Found weird apks and after some digging found it emulated a pixel phone and performed fraudulent ad impressions using my home internet after I turned off my TV.
Returned it and reported to Amazon. The listing was gone in a day and reposted the next. 🤷♂️
This is yet another reason why we must own our devices, from the ground up.
How can I scan the phone for this? Especially the models they claim come pre installed to its firmware with it?
Does good old Canta still work against these?
It can remove it for the current user. But, since the malware is embedded in the firmware it may get re-installed under a different name.
