Midnight Mimosa malware is preinstalled on cheap Android phones

Bitdefender’s discovery of Midnight Mimosa shows that some low-cost Android phones can arrive already compromised at the firmware level, creating a hard-to-remediate endpoint and supply-chain risk for enterprises. For CIOs and technology leaders, the key implication is that device provenance, authorized sourcing, and mobile trust controls are now as important as post-deployment security, especially since the malware can evade normal app-based removal and enable fraud, persistence, and hidden payload delivery.