Hackers Exploit Android Car Head Units in Supply-Chain Attack for Proxy Botnet and Ad Fraud

Hackers are conducting a supply-chain attack targeting Android-based car head units by exploiting a legitimate device-update app to distribute malware. The malware enlists compromised devices into a proxy botnet or repurposes them for ad fraud. The attack specifically affects Android car head units, though no specific models, dates, or CVE IDs were mentioned. The primary impacts include unauthorized use of infected devices for proxy traffic or fraudulent advertising activities. No attribution to a specific threat actor or geographic focus was provided.