LOWMalware
Global

Low-cost Android phones ship with residential proxy malware

·Source: BleepingComputer

Updated:

Executive Summary

A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad fraud, and turn devices into residential proxies. [...]

Analysis

A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad fraud, and turn devices into residential proxies. [...]
Source Attribution

Originally published by BleepingComputer on Oct 8, 2026.

Related Threats

MEDIUMMalware

AOMEI yet to notify customers after hackers hijacked its software updates

In an email, the Hong Kong-registered company confirmed to Recorded Future News that hackers repeatedly altered configuration files on its update servers between April and July, redirecting the software to download malware for minutes at a time.

The Record
MEDIUMMalware

AI Platform Cairn Abused to Hack Over 100 Organizations

At least three threat actors have been abusing Cairn for persistent access and financial theft. The post AI Platform Cairn Abused to Hack Over 100 Organizations appeared first on SecurityWeek .

SecurityWeek
MEDIUMMalware

OVHcloud CLI releases backdoored on GitHub to steal developer secrets

French cloud and hosting provider OVHcloud is warning users that attackers compromised its open-source command-line interface (CLI) tool to distribute information-stealing malware. [...]

BleepingComputer