Malware called 'Midnight Mimosa' has been discovered pre-installed in the firmware of low-cost Android phones using MediaTek chipsets, affecting thousands of devices across over 150 countries. The malware, likely introduced during the supply chain, grants attackers system-level privileges to install apps, commit ad fraud, and convert devices into residential proxies without user knowledge.