A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlists compromised devices in a proxy botnet or uses them for ad fraud.
https://www.bleepingcomputer.com/news/security/hackers-infect-android-car-head-units-with-proxy-botnet-malware/
BleepingComputer
npub1pk…z6763
2026-08-22 14:15:16 UTC
Author Public Key
npub1pkrnqz97z2wckgmwglckccgg65eanvw3wpvuses7npqlvv6st06svz6763Seen on
wss://relay.momostr.pinkPublished at
2026-08-22 14:15:16 UTCEvent JSON
{
"id": "ee191e6df5deefc7a202cea366ebb6d77919c64f1d6967f109bd940c6059dbbe",
"pubkey": "0d873008be129d8b236e47f16c6108d533d9b1d17059c8661e9841f633505bf5",
"created_at": 1787408116,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@BleepingComputer/117139578343290509",
"web"
],
[
"proxy",
"https://infosec.exchange/users/BleepingComputer/statuses/117139578343290509",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/BleepingComputer/statuses/117139578343290509",
"pink.momostr"
],
[
"-"
]
],
"content": "A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlists compromised devices in a proxy botnet or uses them for ad fraud.\n\nhttps://www.bleepingcomputer.com/news/security/hackers-infect-android-car-head-units-with-proxy-botnet-malware/",
"sig": "577789527a31ad50874d14204b78770211029567b67771b6ee2723c4b9bfdac53a9c48d6b752505068ed5e5c797f3cc325ba9057234ac7cec65c8913a950b678"
}