Buying a cheap smartphone can feel like a smart financial decision, especially when a $150 or $200 device promises many of the same features as a phone costing three times as much. But a new cybersecurity discovery suggests that some bargain Android phones may come with a hidden expense: compromised security before the buyer even turns them on.
On October 8, 2026, cybersecurity company Bitdefender revealed a malware operation called Midnight Mimosa, which researchers discovered embedded in the firmware of certain inexpensive Android devices. The malicious software can secretly install applications, manipulate advertising activity, and potentially allow attackers to use infected phones for other purposes. Researchers observed the operation on thousands of devices across more than 150 countries, including the United States. If you’ve bought a cheaper Android phone recently, here’s what you need to know to keep your personal data safe.
