First Malware Built Specifically for Car Head Units Fuels Botnet
New malware targets car head units, fueling the BadBox botnet with millions of devices.
Kaspersky researchers have identified the first malware specifically designed for car head units, exploiting a vulnerability in the software update system of DoFun infotainment systems. This malware is linked to the BadBox botnet, which has already compromised millions of Android devices, and suggests an expansion of the threat actors' targeting methods beyond budget devices.
AI summary of the linked source. Not reviewed by an editor. How this works
Run DoFun?
Get an email when a new story names DoFun, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThreat actors exploited a vulnerability in the software update mechanism of DoFun infotainment systems to deploy the first malware specifically designed for automotive head units, tying compromised vehicles into the BadBox botnet. This attack highlights how the attack surface for botnets is rapidly expanding beyond traditional consumer electronics into embedded systems in vehicles, where security patching is often infrequent or ignored. The exploitation of the update pipeline itself is particularly dangerous, as it subverts a trusted channel that users and manufacturers rely upon for security fixes. As connected vehicles become more prevalent, insecure software update processes in automotive components represent a critical and largely underappreciated risk vector.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — BadBox