A new Android malware family is targeting vehicle head unit firmware developed by DoFun, spreading through legitimate built-in updaters. Discovered by Kaspersky, the malware serves a multi-stage downloader for ad fraud and to create a proxy botnet. This supply-chain attack highlights the growing threat to embedded systems in vehicles.