Malware Infiltrates Cheap Android Phones Across 150 Countries
Key Summary
Cybersecurity firm Bitdefender reveals that thousands of budget Android phone owners worldwide have been infected with malware pre-installed in the device firmware, affecting over 150 countries, including Mexico, France, and the US. The malware, dubbed Midnight Mimosa, can't be uninstalled and poses a significant threat to users' personal data and security.
Background Context
The issue of cheap Android phones being shipped with malware has been a growing concern in recent times. According to past coverage, the XRP Ledger has been criticized for its 'cheap' reward for identifying a supply bug that could have compromised its 100 billion XRP cap. Crypto analyst ZachXBT has also expressed skepticism over Ripple's $250,000 payout to fix an 18T XRP bug, arguing that the payout is excessive and questions the valuation of XRP. Meanwhile, Qualcomm CEO Cristiano Amon has stated that AI companies are demanding smartphones that can run 100-billion-parameter models continuously by 2028, requiring significant advancements in hardware and power efficiency.
The Problem
Thousands of budget Android phone owners around the world have been hit with malware that was already on their devices before they ever switched them on. The malware, dubbed Midnight Mimosa, is baked into the firmware of low-cost Android phones built on MediaTek chips. The highest-volume models are the Doogee S200 X and the Cubot KINGKONG X, along with knockoff devices posing as Samsung and Apple phones. Victims are spread across more than 150 countries, led by Mexico, France and Italy, then the US, Germany, Brazil and Spain. According to Bitdefender, the malware ships preinstalled in the device firmware, and it can't be uninstalled. It has deployed at least 32 disguised apps, including fake weather, app-lock, file-manager, icon-tool, OCR and audio-editor tools. Infected phones can also be turned into residential proxies and used as part of a botnet, including for DDoS attacks.
Implications
The researchers say it remains unclear at what point in the supply chain the malware is being added to the phones, and it has not accused Doogee, Cubot or any other brand of planting it. Bitdefender also found 13 apps on the Google Play Store that carry the same ad-fraud code. The firm warns that users should be cautious when using their infected devices and advises them to immediately uninstall any suspicious apps. The incident highlights the need for better security measures in the Android ecosystem and the importance of consumers being aware of the risks associated with cheap, low-cost devices.
Key Takeaways
• Thousands of budget Android phone owners worldwide have been infected with malware pre-installed in the device firmware. • The malware, dubbed Midnight Mimosa, can't be uninstalled and poses a significant threat to users' personal data and security. • The incident highlights the need for better security measures in the Android ecosystem and the importance of consumers being aware of the risks associated with cheap, low-cost devices.