Xiaomi Redmi Note 15 and Redmi 15 Push Notifications Lead to Phishing Site

A Hungarian consumer association tested 156 smartphones from 14 manufacturers and discovered that the pre‑installed Mi Browser on Xiaomi Redmi Note 15 and Redmi 15 devices displayed push notifications that, when tapped, opened a counterfeit website imitating the German news outlet Tagesschau. Experts said the site was almost certainly a phishing page designed to harvest personal data.

Xiaomi said it has opened an internal investigation but did not confirm whether the flaw has been fixed or how many units are affected. The association recommends owners of the two models disable Mi Browser notifications, uninstall the app if it is not used, or set a trusted third‑party browser as the default.

The issue highlights a broader security risk in factory‑installed software that can deliver malicious content without user awareness.