Thousands of cheap Android phones shipped with preinstalled ad-fraud malware

Bitdefender found preinstalled malware, dubbed Midnight Mimosa, on thousands of cheap Android phones using MediaTek chips. The malware runs with system privileges, commits ad and click fraud, and can help turn devices into botnet nodes; infections were seen in over 150 countries.

• Malware is embedded in firmware before first sale and cannot be uninstalled
• Infections detected in more than 150 countries over about two years
• At least 32 disguised apps and 13 Google Play apps tied to the campaign
• Affected devices are low-cost or counterfeit phones, one priced around $180