this post was submitted on 11 Oct 2026
107 points (98.2% liked)

Android

34863 readers
3 users here now

DROID DOES

Welcome to the Android community on Lemmy. Here you can participate in amazing discussions and events relating to all things Android.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules


1. All posts must be relevant to Android devices/operating system.


2. Posts cannot be illegal or NSFW material.


3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.


4. Non-whitelisted bots will be banned.


5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.


6. Memes are not allowed to be posts, but are allowed in the comments.


7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.


8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.


Community Resources:


founded 3 years ago
MODERATORS
 

cross-posted from: https://infosec.pub/post/53450841

Bitdefender finds Midnight Mimosa, preinstalled Android malware on cheap MediaTek phones that fakes ad clicks, drops apps and builds a proxy botnet. Bitdefender researchers discovered a campaign called Midnight Mimosa involving preinstalled Android malware on low-cost phones from different brands that use MediaTek platforms. The malware is built into the device firmware and may be […]

top 8 comments
sorted by: hot top controversial new old
[–] hexagonwin@lemmy.today 1 points 2 days ago

this has been a thing since forever tho. luckily(?) those devices also tend to have easy low level flashing and rooting methods

This is yet another reason why we must own our devices, from the ground up.

[–] cass80@programming.dev 9 points 4 days ago

I encountered this on a cheap android tv box off Amazon. Found weird apks and after some digging found it emulated a pixel phone and performed fraudulent ad impressions using my home internet after I turned off my TV.

Returned it and reported to Amazon. The listing was gone in a day and reposted the next. 🤷‍♂️

[–] squirrel@cake.kobel.fyi 17 points 5 days ago

[...] and may be hidden in different system packages depending on the model. It is already on the phone before the owner turns it on for the first time and cannot be removed.

[–] LuceVendemiaire@lemmy.dbzer0.com 1 points 3 days ago* (last edited 3 days ago) (1 children)

Does good old Canta still work against these?

[–] limerod@reddthat.com 2 points 3 days ago

It can remove it for the current user. But, since the malware is embedded in the firmware it may get re-installed under a different name.

[–] ratzki@discuss.tchncs.de 1 points 3 days ago

Is this included in HAD already?

[–] Magnum@infosec.pub 2 points 4 days ago

How can I scan the phone for this? Especially the models they claim come pre installed to its firmware with it?