aapt2

Reported Context (1)

AndroidManifest.xml of the enabler (aapt2 dump). sharedUserId=android.uid.system + coreApp + persistent = firmware system component; the privileged permissions are what enable silent install/uninstall and silent Midnight Mimosa Malware Preinstalled on Android Phones Enables Ad Fraud and Proxy Botnets

Malware (15)

People (2)

MITRE ATT&CK (13)

Vendors (6)

Products (7)

Tools (2)

Countries (7)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.