Android car head units are being pulled into a proxy botnet through a supply-chain attack
INTERNETUnverifiedUpdated:
A legitimate update app on Android car head units reportedly became a malware distribution path. The unverified report describes compromised units being used in a proxy botnet or for ad fraud.
A legitimate updater becomes the infection path
According to BleepingComputer, a supply-chain attack on Android-based car head units used a legitimate device-update app to distribute malware. Compromised devices were reportedly enlisted in a proxy botnet or used for ad fraud.
The targeted devices used a legitimate device-update application.
That update path was reportedly abused to enlist compromised units in a proxy botnet or use them for ad fraud.
In-car devices are no longer just local electronics; compromised units can become network resources for attackers.
Sources
- BleepingComputerHackers infect Android car head units with proxy botnet malwareRead source →