Android Car Malware Spreads Through Built
Kaspersky found MoYu Group malware infecting DoFun Android car head units via firmware updaters, enabling ad fraud and proxy botnet operations.
58
Product
TWCore
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenAug 22, 2026
- Last mentionedAug 25, 2026
Timeline
4 articles · newest firstHackers infecting Android car systems to build proxy botnet
Kaspersky reports MoYu Group-linked malware infecting DoFun Android car head units, enrolling them in a BadBox-linked proxy botnet for ad fraud and traffic routing.
48
Android car head units infected with proxy botnet malware through built-in software updaters
Kaspersky found malware delivered via car head unit updaters, attributed to the MoYu Group's BADBOX operation, recruiting devices into a proxy botnet.
55
Malware Hijacks Android Car Head Units
Kaspersky reports first known malware infecting Android car head units via firmware updaters, repurposing vehicles as BADBOX proxy nodes for ad fraud.
52
Appears with
- MoYu Groupthreat actor · 4
- Kasperskyvendor · 4
- BadBoxmalware · 3
- DoFunvendor · 3
- zhimaproduct · 2
- JarServicemalware · 2
- Kasperskyorganization · 2
- HUMAN Securityorganization · 2
- HUMAN Securityvendor · 2
- BadBoxthreat actor · 2
- DoFunproduct · 1
- Googleorganization · 1
- FBIorganization · 1
- JarServiceproduct · 1
- DoFunorganization · 1
- Nokia Deepfieldvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.