Researchers discovered some MIUI analytics package apps that can be exploited to remotely distribute malicious ROM upgrades using a man-in-the-middle attack.