Kaspersky identifies malware distributed through Android car-head-unit updaters

Kaspersky says it identified malware distributed through built-in update mechanisms in DoFun Android-based automotive head-unit firmware. The campaign uses a system app's update channel to deliver a downloader that can retrieve further payloads for ad fraud and a proxy botnet, according to the researchers. Kaspersky attributes the activity with high confidence to the MoYu Group and says the software-distribution issue was addressed after responsible disclosure. The malware ran without a user interface and contacted command servers for instructions.