Interestingly enough, the Mariposa bot is not the only malware I found on the Vodafone HTC Magic phone. There’s also a Confiker and a Lineage password stealing malware. I wonder who’s doing QA at Vodafone and HTC these days?
In the comments, Bustamante writes:
Regardless, I don’t think this has to do with factory settings, but rather with poor QA process of refurbished phones.