Some cheap Android phones are shipping with malware baked in

TL;DR Researchers have uncovered a malware campaign affecting some low-cost Android phones, including devices from Doogee and Cubot. Dubbed Midnight Mimosa, the malware is embedded in device firmware and can install apps, grant permissions, evade Play Protect, and turn phones into botnet nodes. The campaign has been seen on thousands of devices across more than 150 countries, and removing the malware isn’t easy because it lives in the system partition.