Hackers infecting Android car systems to build proxy botnet
Kaspersky reports MoYu Group-linked malware infecting DoFun Android car head units, enrolling them in a BadBox-linked proxy botnet for ad fraud and traffic routing.
48
Malware
BADBOX
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 22, 2026
- Last mentionedAug 24, 2026
Timeline
3 articles · newest firstAndroid car head units infected with proxy botnet malware through built-in software updaters
Kaspersky found malware delivered via car head unit updaters, attributed to the MoYu Group's BADBOX operation, recruiting devices into a proxy botnet.
55
Malware Hijacks Android Car Head Units
Kaspersky reports first known malware infecting Android car head units via firmware updaters, repurposing vehicles as BADBOX proxy nodes for ad fraud.
52
Appears with
- Kasperskyvendor · 3
- MoYu Groupthreat actor · 3
- DoFunvendor · 3
- TWCoreproduct · 3
- HUMAN Securityvendor · 2
- Kasperskyorganization · 2
- HUMAN Securityorganization · 1
- Androidproduct · 1
- zhimaproduct · 1
- BadBoxthreat actor · 1
- JarServicemalware · 1
- FBIorganization · 1
- JarServiceproduct · 1
- Nokia Deepfieldvendor · 1
- DoFunorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.