Experts warn cheap Android phones are being shipped with malware built-in

Security researchers at Bitdefender have uncovered a widespread supply chain compromise affecting various budget Android smartphones. Devices from manufacturers including Doogee and Cubot, as well as generic ripoff models, are being shipped with firmware-level malware preinstalled. This malicious software generates fraudulent ad revenue by creating invisible overlays on legitimate apps and turns infected devices into residential proxies for criminal activities, such as DDoS attacks. The threat affects thousands of users across 150 countries. Because the malware is embedded at the firmware level, removal is complex and often requires technical expertise via the Android Debug Bridge (ADB) or a complete firmware reflash. Experts advise consumers to avoid purchasing devices from brands with questionable reputations to mitigate the risk of such deep-seated security vulnerabilities. The discovery highlights significant gaps in the security oversight of low-cost hardware manufacturing and distribution.