Security1 hOctober 16, 2026, 06:17

Bitdefender finds pre-installed malware in thousands of budget Android phones

Bitdefender detailed a campaign dubbed "Midnight Mimosa" in which malware is baked into the firmware of budget Android phones running low-power MediaTek chips, generating revenue through hidden ads. Thousands of devices from Cubot, Doogee and counterfeit Samsung Galaxy S24–S26 models were tracked in 2024–2025, with 13% in Mexico and 8% in the US.

BGR

Open source

Bitdefender finds pre-installed malware in thousands of budget Android phones

Malware is embedded in firmware of devices with low-power MediaTek chips
Affected brands include Cubot, Doogee and fake Samsung Galaxy S24, S25, S26
13% of infected devices are in Mexico, 8% in the US, under 3% in Canada
Code signatures trace back to Android ODM Shenzhen Zediel

#Bitdefender#MediaTek#Samsung#Android

Thousands of cheap Android phones shipped with preinstalled ad-fraud malware

Security

Bitdefender finds preinstalled Android malware Midnight Mimosa in 150 countries

Gadgets

Oppo Find X10 Pro Max is the first phone with three 200MP cameras

Security

Bitdefender finds pre-installed malware in thousands of budget Android phones

Thousands of cheap Android phones shipped with preinstalled ad-fraud malware

Bitdefender finds preinstalled Android malware Midnight Mimosa in 150 countries

Oppo Find X10 Pro Max is the first phone with three 200MP cameras

Attackers use GitHub poem to infect thousands of servers with malware