The phone was compromised before the user turned it on: rise of Midnight Mimosa