MERENA
Advisory Alert

Hackers infect Android car head units with proxy botnet malware

Some Android-based car dashboard systems are being infected through a trusted update app, allowing criminals to secretly misuse the device for internet traffic relays or fake ad activity. This means a problem can come from a normal-looking update rather than something the driver knowingly installed.


Who is at risk

People who own or use vehicles with Android-based aftermarket or built-in car head units that receive app or system updates are most at risk.

What to watch for

Watch for unexpected pop-ups, strange ads, sluggish performance, unusual data usage, or update requests from your car display that seem frequent or unfamiliar.

What to do

Avoid installing updates unless they come directly from the vehicle maker or trusted seller, and check with the manufacturer or installer for official guidance on safe updates.