As reported today on Threat Post, a researcher at Panda Security connected the new phone–from European distributor Vodafone–to her PC and was alerted by her anti-virus software that the handset was infected with the Mariposa botnet client malware, which quickly attempted to infect other PCs in the network.

And perhaps even more shocking, this was not the only malware pre-loaded on the phone:

Interestingly enough, the Mariposa bot is not the only malware I found on the Vodafone HTC Magic phone. There’s also a Confiker and a Lineage password stealing malware. I wonder who’s doing QA at Vodafone and HTC these days…