cross-posted from: https://infosec.pub/post/53326082
A malware campaign dubbed ‘Midnight Mimosa’ has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad fraud, and turn devices into residential proxies. […]
The researchers found preinstalled malware on devices with model names associated with legitimate manufacturers, including the Doogee S200 X and Cubot KINGKONG X, as well as phones impersonating Samsung and Apple products.
In case you were wondering which brands are mentioned here.
oh no i would have trusted the KINGKONG X
no, you should always be team GODZILLA Y, everyone knows KING KONG X sucks
Team Mothra Z

my bank…
graphene os: eww no, sooo insecure, couldn’t possibly trust that, fails checkbox compliance!
rando crapware infested phone that hasn’t seen a security update in 3 years: right this way sir…
“We checked the checkbox that said ‘security’.”






