cross-posted from: https://infosec.pub/post/53326082
A malware campaign dubbed ‘Midnight Mimosa’ has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad fraud, and turn devices into residential proxies. […]
I had this mindset until signing up with a bank that only uses its app for 2FA of any kind. No SMS option. No TOTP code option. So anytime you log in using a a mobile or desktop browser it would require opening the mobile app (running google play services OR having an iPhone).
The only option I found to keep using this bank was to disable 2FA entirely.
Which is dumb.
But it was related to using a bank in a new country on GrapheneOS and Aurora Store version not fully working without Play Services and it turns out all banks suck here and not worth changing banks and there’s not much money in this account anyway so just…sigh.