> TritonInfoSec News
Home / Oct 10, 2026 / Story
0
#8 BleepingComputer general October 08, 2026 at 19:20 UTC

Low-cost Android phones ship with residential proxy malware

By Lawrence Abrams

AI Summary

The 'Midnight Mimosa' malware campaign has been found pre-installed in the firmware of low-cost Android smartphones sold across 150+ countries, enabling silent app installation, ad fraud, and conversion of devices into residential proxies — all without user interaction and with no ability to uninstall. Bitdefender researchers confirmed the malware is present before the device is first powered on, representing a supply chain compromise targeting consumers who have no viable remediation path short of device replacement.

Read full article → https://www.bleepingcomputer.com/news/security/low…

Relevance score: 78.0/100

# More from October 10

  1. 1
    FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions The Hacker News
  2. 2
    Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies The Hacker News
  3. 3
    Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland BleepingComputer
  4. 4
    Max severity SonicWall SMA1000 flaw now exploited in attacks BleepingComputer
  5. 5
    Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments The Hacker News
  6. 6
    Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge The Hacker News
  7. 7
    FBI arrests another suspected ShinyHunters hacker after agency breach BleepingComputer
  8. 9
    Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access The Hacker News
  9. 10
    $10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack Graham Cluley