BreachFeed
← All incidents
suspectedhighSupply chainFirst reported Oct 20, 2026

Android low-cost phones: preinstalled firmware malware 'Midnight Mimosa' found in 150+ countries

Researchers report that thousands of low-cost Android phones in more than 150 countries shipped with malware embedded in their firmware before purchase, in a campaign dubbed Midnight Mimosa. The malware grants attackers system-level access and can silently install or remove apps and disable Google Play protections, without user interaction.

Members only

The full record: the timeline and 1 linked report

  • Every update as it happened, with the status at each step
  • Every report behind the record, newest first
  • Alerts the moment Android device manufacturers (unspecified low-cost Android phone vendors) — or anything else you track — is hit again

A free account is all it takes — no card, one minute.