Kaspersky links Android car-head-unit malware to proxy-botnet operation

Kaspersky researchers identified malware distributed through a legitimate update app on Android-based car head units from DoFun, BleepingComputer reported. The researchers attributed the operation to the MoYu group and said it used the JarService malware to download additional encrypted payloads. The malware collects device information, receives commands and primarily loaded a reverse-proxy module, while also making requests associated with click fraud. Kaspersky said DoFun told it the problem had been resolved.