cross-posted from: https://infosec.pub/post/53326082
A malware campaign dubbed ‘Midnight Mimosa’ has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad fraud, and turn devices into residential proxies. […]


Makes me feel so much safer with google or Apple 😁 They could though. All the tech for it is there and already installed. And you wouldn’t even know if they did, because you don’t own your own phone.
Not that I wouldn’t worry about an added layer of spy-shit though. The difference between that malware and the big malware it’s installed on is just slim to me. I’m very security- and privacy-driven.