badbox2 articles
BadBox Botnet Comes for Your Car: First Malware Targeting Vehicle Head Units Discovered
Kaspersky researchers have discovered what appears to be the first malware specifically designed for car head units, found on Android-powered infotainment systems made by Chinese company DoFun. The malware was delivered by exploiting a vulnerability in the device's software update system, and is believed to be the work of the MoYu Group, a threat actor linked to the BadBox botnet. The attack suggests that BadBox operators are expanding beyond budget TV boxes and Android devices, now targeting vehicle infotainment systems to ensnare them in a proxy botnet used for ad fraud and other illegal schemes.
Your Car's Infotainment System Is Now a Botnet Node, Apparently
Kaspersky researchers have discovered a new malware family targeting Android-based car head units, marking the first documented case of malware using an infection chain specifically designed for vehicle systems. The malware, attributed to the MoYu Group, spreads through the legitimate built-in software update mechanism of DoFun firmware, deploying a multi-stage downloader that enables ad fraud and recruits devices into a proxy botnet. The threat highlights the growing security risks posed by internet-connected automotive platforms, as the infected head units' SIM card slots and Android compatibility make them increasingly attractive targets for cybercriminals.