OTX Threat: The phone was compromised before the user turned it on: the rise of Midnight Mimosa

A sophisticated malware campaign targets low-cost Android devices built on MediaTek platforms, with malicious code preinstalled in device firmware before users receive them. The platform-signed system application operates with elevated privileges, enabling operators to silently install applications, grant permissions, and load remote code. The scheme primarily generates revenue through ad fraud, c