[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-hackers-are-now-hijacking-car-infotainment-systems":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},5835,"hackers-are-now-hijacking-car-infotainment-systems","Hackers Are Now Hijacking Car Infotainment Systems","Kaspersky found malware built specifically for Android car head units, hijacking a legitimate update channel to run ad fraud in the background.","A malware campaign is quietly infecting Android-based car infotainment systems, turning dashboards into bots that serve unwanted ads.\n\nKaspersky says attackers hijacked TWCore, the legitimate app that updates head units made by DoFun, using a dropper called JarService to install malware with no visible interface. The firm links the campaign to MoYu Group, an actor tied to the BadBox botnet that has already infected TV boxes, phones, and tablets. The malware runs nine remote commands, mostly for displaying ads and ad fraud, while also collecting device details like screen resolution, Wi-Fi network name, and MAC address. Kaspersky found the botnet's control panel sharing infrastructure with two residential proxy services, PXYEDGE and ProxyForU. Kaspersky notified DoFun, which says it has fixed the issue on most devices already in the field.\n\nHead units don't usually store much personal data, but they run constantly on built-in SIM connections and get far less security scrutiny than phones, which makes them an appealing target anyway. Kaspersky calls this the first malware it has seen built specifically for car head units, rather than repurposed phone malware, which suggests attackers are now treating vehicles as just another Android device class to exploit.\n\nBadBox has already proven how much damage a botnet built on trusted update channels can do to TVs and set-top boxes. Moving that playbook into cars just changes the venue, not the tactics.","[\"connected-cars\",\"android-malware\",\"botnet\",\"iot-security\"]","2026-08-24T18:35:00.000Z","2026-08-24T19:32:32.123Z","2026-08-24T19:32:44.002Z","published",null,[],"security",[26,27,28,29],"connected-cars","android-malware","botnet","iot-security",[31],{"name":32,"url":33},"TechRadar","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsecurity\u002Feven-connected-car-head-units-are-being-targeted-by-hackers-now-experts-warn-in-car-systems-are-at-risk-of-being-hijacked-into-a-botnet",0,{"sections":36},[37,42,46,51,56,61,66,71,76,81,86,91,96,101],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",3326,"2026-08-24T15:46:32.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":45},"Security",466,"2026-08-24T19:45:04.000Z",{"name":47,"slug":48,"count":49,"latest_published_at":50},"Policy","policy",224,"2026-08-24T19:02:32.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Hardware","hardware",145,"2026-08-22T21:25:33.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Consumer Tech","consumer-tech",95,"2026-08-18T16:05:00.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Science","science",91,"2026-08-20T10:01:48.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Startups","startups",51,"2026-08-24T13:47:26.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"General","general",33,"2026-08-18T22:18:13.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]