As cited
Copy frozen at (site build).
threat intel
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
Kaspersky researchers identified a malware family targeting Android-based vehicle head units manufactured by DoFun, discovered in June 2026. The threat spreads through built-in firmware updaters and establishes a multi-stage downloader to facilitate ad fraud and proxy botnet operations.
Why it matters: Vehicle manufacturers and fleet operators using DoFun head units face compromised in-vehicle systems that could be monetized for ad fraud or repurposed as botnet nodes, requiring immediate investigation of update mechanisms and device configurations.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
Kaspersky researchers identified a malware family targeting Android-based vehicle head units manufactured by DoFun, discovered in June 2026. The threat spreads through built-in firmware updaters and establishes a multi-stage downloader to facilitate ad fraud and proxy botnet operations.
Why it matters: Vehicle manufacturers and fleet operators using DoFun head units face compromised in-vehicle systems that could be monetized for ad fraud or repurposed as botnet nodes, requiring immediate investigation of update mechanisms and device configurations.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
Kaspersky researchers identified a malware family targeting Android-based vehicle head units manufactured by DoFun, discovered in June 2026. The threat spreads through built-in firmware updaters and establishes a multi-stage downloader to facilitate ad fraud and proxy botnet operations.
Why it matters: Vehicle manufacturers and fleet operators using DoFun head units face compromised in-vehicle systems that could be monetized for ad fraud or repurposed as botnet nodes, requiring immediate investigation of update mechanisms and device configurations.
- Source published
- First seen by Cybersecurity Tracker