Malware infects Android-based automotive head unit firmware
Security researchers have discovered Android-based malware specifically targeting automotive head units. The malware installs as a background app without a user interface, raising concerns about the security of connected vehicle systems.
Why it matters
As vehicles become increasingly digitized, the vulnerability of automotive firmware to malware poses significant safety and privacy risks for consumers.
While monitoring Android threats in June 2026, we discovered a new piece of Android malware. What struck us as unusual was that it installed like an ordinary user app yet made no attempt to disguise itself as legitimate software: it had no user interface at all. This led us to suspect the app might be reaching users’ devices without their knowledge. Further investigation confirmed that hypothesis and allowed us to reconstruct the entire infection chain.
Kaspersky solutions detect the threats described below under the following detection names:
A head unit is a system that combines multimedia functions with partial control over certain vehicle functions. Head units may come as part of a car’s factory equipment or as an aftermarket upgrade. The main attack vectors for these systems are compromise via physical access and vulnerabilities in the head unit’s OS or components, both of which we’ve covered previously .
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in