Android automotive head units compromised via malicious firmware update channels

Attackers have compromised the update infrastructure of DoFun Android head units to distribute malware capable of ad fraud, proxy botnet participation, and arbitrary code execution. The extent of the affected user base remains unquantified, though the use of legitimate update channels suggests a significant supply chain vulnerability.