cross-posted from: https://infosec.pub/post/53326082
A malware campaign dubbed ‘Midnight Mimosa’ has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad fraud, and turn devices into residential proxies. […]
Not to shill for Apple or Google, but it’s definitely important to draw a distinction between first party telemetry and straight up distributing malware. If we can’t we honest in our framing then there is really no reason to take what we have to say seriously.