Malware infects Android-based automotive head unit firmware

Let's be real: we all knew this was coming. The moment automakers decided to slap Android on dashboards without treating them like the critical systems they are, the writing was on the wall. This isn't some theoretical exploit—it's a full-blown malware infection pre-installed in head unit firmware, meaning it ships from the factory or gets pushed via OTA updates with the vendor's blessing. The researchers at Kaspersky (via Securelist) found this thing phoning home, grabbing credentials, and even keylogging. That's not a prank; that's a surveillance platform on wheels. The deeper issue here is the automotive industry's reckless adoption of consumer-grade software without the security maturity that comes with it. Android is open, flexible, and cheap—perfect for a cost-cutting automaker, but it's also a sprawling attack surface with zero update guarantees. Your phone gets monthly patches (sometimes), but your car? Good luck. The head unit is often the most exposed component, connecting to Bluetooth, Wi-Fi, and cellular networks, and once it's compromised, it's a pivot point into the vehicle's CAN bus. That's the same bus that controls braking and steering in some vehicles. So no, this isn't just about stolen Spotify playlists. What's particularly nasty is the persistence. Because the malware lives in the firmware, a factory reset or reboot won't purge it. You'd need to reflash the entire unit, which most owners can't do. And the supply chain angle is even scarier—if this is coming from a third-party firmware vendor, it could be affecting multiple car brands. The report doesn't name names, but you can bet some budget EVs and aftermarket head units are already crawling with this stuff. The automotive industry needs to wake up and treat software like safety equipment, not an afterthought. Until then, every Android head unit is a potential spy in your dashboard. Source: [Securelist article](https://securelist.com/android-head-unit-malware/121106/)