Hackers infect Android car head units with proxy botnet malware

A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlists compromised devices in a proxy botnet or uses them for ad fraud. The malware is delivered through a trusted update mechanism, compromising the devices for malicious purposes. The attack highlights risks in the automotive supply chain and the need for robust security measures.