Feed›Malware›BadBox-linked Android malware has now infected car head unit...
MalwareCyber Insider
9.0 — CRITICAL

BadBox-linked Android malware has now infected car head units

📅 21 August 2026 at 10:18 UTC📰 Cyber InsiderView original source ↗
BadBox-linked Android malware has now infected car head units

Android malware is spreading through the built-in firmware update mechanism of automotive head units, turning the devices into nodes for ad fraud and a residential proxy botnet. Kaspersky reports this is the first documented malware campaign with an infection chain specifically designed around car head units. Kaspersky researcher Dmitry Kalinin discovered the activity while monitoring … The post BadBox-linked Android malware has now infected car head units appeared first on CyberInsider.

🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview

Android malware has infected car head units through the built-in firmware update mechanism, turning devices into nodes for ad fraud and a residential proxy botnet. This is the first documented malware campaign specifically designed around car head units.

⚙️Technical Details
Affected Systems
DoFun Android automotive head units
Attack Vectors
MQTT server on cardoor[.]cn domain, APK package downloads
💥Impact Assessment
Severity: critical
Who Is at Risk
Owners and installers of affected DoFun Android automotive head units
🛡️Recommended Actions
1Apply vendor security updates to affected systems
2Restrict unnecessary internet connectivity where practical
3Investigate unexpected applications or network activity on Android head units
📦Affected Products
DoFun Android automotive head units

Read the full article

This is a curated summary. The complete article is available at Cyber Insider.

Read on Cyber Insider ↗
← Back to feed