Car Malware Hijacks Infotainment Systems

A novel Android malware specifically designed to infect vehicle head units was uncovered in June, marking a rare cybersecurity event. This malware targeted the core systems controlling a car's infotainment, navigation, and connectivity features. Security researchers found the threat embedded within the firmware updaters of DoFun, a Hong Kong-based supplier of Android automotive head unit software.

The malware, disguised as an app named JarService, operated without a user interface, suggesting covert installation. It leveraged a system application responsible for updates and analytics to distribute itself, indicating a potential compromise of DoFun's IT infrastructure. Unlike typical Android malware focusing on personal data, this threat aimed to enlist car head units into a botnet.

Evidence suggests the ultimate objective was online ad fraud, achieved by forcing infected vehicles to display advertisements and simulate user engagement. The antivirus provider, Kaspersky, has notified DoFun, which has since reported resolving the identified security issues. Similarities to another Android threat, BadBox, were noted by researchers.