Midnight Mimosa ships in some low-cost Android firmware, silently installs apps, and uses payloads for ad fraud and residential proxies.