Hackers infecting Android car systems to build proxy botnet
Kaspersky reports MoYu Group-linked malware infecting DoFun Android car head units, enrolling them in a BadBox-linked proxy botnet for ad fraud and traffic routing.
48
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenAug 21, 2026
- Last mentionedAug 24, 2026
Timeline
4 articles · newest firstAndroid car head units infected with proxy botnet malware through built-in software updaters
Kaspersky found malware delivered via car head unit updaters, attributed to the MoYu Group's BADBOX operation, recruiting devices into a proxy botnet.
55
Malware Hijacks Android Car Head Units
Kaspersky reports first known malware infecting Android car head units via firmware updaters, repurposing vehicles as BADBOX proxy nodes for ad fraud.
52
The invisible passenger in your car
Kaspersky discovered Android adware and proxy-botnet malware delivered inside legitimate DoFun car head-unit software.
48
Appears with
- Kasperskyvendor · 4
- BadBoxmalware · 3
- MoYu Groupthreat actor · 3
- TWCoreproduct · 3
- Kasperskyorganization · 2
- HUMAN Securityvendor · 2
- DoFunorganization · 1
- BadBoxthreat actor · 1
- HUMAN Securityorganization · 1
- Androidproduct · 1
- zhimaproduct · 1
- Nokia Deepfieldvendor · 1
- Android head-unit malwaremalware · 1
- JarServicemalware · 1
- FBIorganization · 1
- JarServiceproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.