Executive Summary

A supply‑chain attack targets Android‑based car head units by hijacking a legitimate device‑update app. The malware turns infected units into a proxy botnet or uses them for ad‑fraud, enabling attackers to route traffic or generate illicit ad revenue.

---

Intelligence Metadata - Source Publisher: Bleeping Computer - Published Date: 2026-08-22T14:14:24+00:00 - Category: threat-intel

Original Description: A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlists compromised devices in a proxy botnet or uses them for ad fraud. [...]

"What matters is the value we've created in our lives, the people we've made happy and how much we've grown as people."

— Daisaku Ikeda