Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet

Researchers have identified a new malware family targeting Android-based vehicle head units, specifically those with firmware developed by DoFun. The malware was discovered by Kaspersky in June 2026 and is designed to facilitate ad fraud and create a proxy botnet. It spreads through the built-in updaters of the head units, allowing it to infect the systems. The ultimate goal of the malware is to download additional stages that enable these malicious activities. The malware's ability to spread through built-in updaters makes it a notable threat.