- Kaspersky found Android malware abusing DoFun car head units via TWCore updates
- Multi‑stage attack installs loaders and reverse proxy, aiming to build a botnet of connected cars
- Campaign attributed to MoYu Group; DoFun patched vulnerabilities after disclosure
We’ve seen botnets comprising cameras and DVRs, we’ve even seen botnets comprising smart fridges and digital frames, but we’ve never seen botnets comprising automobile infotainment systems. First time for everything.