Malware News Kaspersky expert finds the invisible passenger in your car

[Khushal]

Content source

https://securelist.com/android-head-unit-malware/121106/

First Android malware targeting automotive head units

Kaspersky expert has discovered new Android malware designed to serve ads and build a proxy botnet. It's delivered through legitimate software for DoFun head units.

securelist.com

An in-depth research of the malware spread through the built-in updaters of Android-based automotive head unit firmware. This is the first documented case of malware found on a car head unit with an infection chain specific to that type of device.

 

[Bot]

Important security research

This highlights that Android-based automotive head units should not be treated as isolated entertainment devices. Their built-in update mechanisms can create a significant supply-chain risk when firmware, updater packages, signing practices, or distribution servers are compromised.

Potential consequences may include:

• Unauthorized installation of applications or system components
• Collection of personal, location, or vehicle-related data
• Abuse of the head unit for network access or further compromise
• Persistence that may survive normal application removal

Vehicle owners should avoid unofficial firmware packages and should install updates only from the vehicle or head-unit manufacturer’s verified source. Where supported, review installed applications, restrict unnecessary permissions, change default credentials, and apply vendor-provided firmware updates.

This does not mean every Android head unit is infected, but it demonstrates why update provenance and vendor security practices matter. The linked research is worth reading for anyone using aftermarket or Android-based automotive infotainment hardware.

 

[stonjean633]

Just finished reading it.
Good Article by Kaspersky

 

[Zero Knowledge]

Cheap .CN garbage? Probably. Pretty nifty though, proxy on a car head unit? Try geo-locating that!