While the temptation to buy a ridiculously priced mobile phone that mimics the larger models in the market is great, these devices usually A hidden cost in the form of Malware indeterminate.
An extensive investigation by a cyber security firm Bitdefender Appeared software Pre-installed is corrupt Thousands of entry-level Android devices and replicas of premium models, such as the Galaxy Ultra.
about it Malware Says Midnight Mimosa. Unlike traditional transmission, this The user should not make the mistake of downloading a suspicious file, since The device codebase comes deeply rooted Before it leaves its box.
this software polluted Disguise yourself in a sophisticated way Adopting a name that pretends to be an essential process of the operating system.
Blended with the Android architecture, it manages to evade the control of conventional antivirus tools and starts To work in the shadows From the moment the terminal is launched.
When the system boots, Midnight Mimosa converts hardware In an engine of fraudulent income.
code Run invisible windows and processes To display ads in the background, the owner consumes resources without noticing any activity on their screen.
Android malware concept.
However, ad fraud is only the first step. Analysts warn that this vulnerability has been created in the supply chain The back door is left openGives cybercriminals the ability to take full control of phones or recruit them to launch massive network attacks.
The geographic reach of this underlying contagion spans more than 150 countries, primarily affecting well-equipped economic instruments. With MediaTek processor.
Research statistics space Mexico as the most vulnerable regionDeposited 13 percent affected devices, closely followed by the United States and Canadian markets.
The entire path of transmission points to the most opaque link in the Asian manufacturing chain, where corporate intermediaries are identified. Responsible for code injection during assembly.
The impact of this threat has even reached official channels, managing to remain hidden 13 infected applications on the Google Play Store.
Although the security team Google has already crawled it and removed it These apps underscore an important lesson about the episode, from their catalog hardware.
While corporations in the certified ecosystem are able to launch patches and remove threats remotely, buyers of cloned phones are left in the lurch.
Without technical support or valid security updates, they encounter a device that carries the threat in its own DNA, removing the virus. to be a technically impossible task.
