Check your phone now; Dangerous malware found in thousands of cheap Android phones

Dangerous malware in cheap Android phones known as Midnight Mimosa, which has infected thousands of devices worldwide, can compromise your digital security; Now it's time to check your phone. Buying cheap fake Android phones may sound tempting, but there are hidden risks. ... The post Check your phone right now; Dangerous malware in thousands of cheap phones

0 Posted by: Alireza Tajik on October 24, 1405 at 18:33

Dangerous malware in cheap Android phones known as Midnight Mimosa, which has infected thousands of devices worldwide, can compromise your digital security; Now it's time to check your phone.

Buying cheap fake Android phones may sound tempting, but there are hidden risks. Security researchers at Bitdefender have identified a dangerous malware called Midnight Mimosa that is already installed on thousands of low-end Android devices. This new discovery has raised concerns about mobile security and the smartphone supply chain.

Midnight Mimosa; Hidden and unremovable malware

This malicious software is installed before turning on the phone and at the firmware level. Midnight Mimosa runs unwanted ads and can open infiltration paths for hackers. It is not possible to remove it in the usual ways and it hides itself as a System program. System codes like com.android.sys.prot, com.android.sys.gmsprot and com.android.sys.bcprot are also related to it. It is designed in such a way that most security scans cannot detect it.

Which Android phones are infected?

Bitdefender researchers have reported the infection of thousands of devices in 2024 and 2025 with this dangerous malware on cheap Android phones. The highest prevalence has been observed in Mexico (13%) and the United States (8%). Doogee and Cubot brands are among the affected devices, along with counterfeit versions of the Samsung Galaxy S24, S25 and S26. The main connection between these phones is the use of MediaTek chipsets, but there is no other way to accurately identify infected phones.

If your phone is infected, there is no need to panic. This malware mainly consumes system resources to generate clicks and does not aim to steal money. However, using an infected device is not recommended; Remove the SIM card and turn off the phone. To identify, look for a System application with a special icon or one of the processes listed. It is strongly recommended to avoid buying fake phones or unknown brands and to choose economical models from reputable brands.