AI Summary

A supply‑chain attack is compromising Android‑based car head units by hijacking a legitimate device‑update application to deliver malware. The malicious code can enlist infected head units in a proxy botnet or exploit them for advertising fraud. Kaspersky researchers examined the payload and linked the campaign to the MoYu threat group, which has previously operated the BadBox botnet. The findings highlight a new vector for compromising automotive infotainment systems.

AI summaries can be wrong sometimes—always verify important details using the source article.