Kaspersky Lab has discovered a malicious campaign targeting car head units. Attackers have implemented nine different commands that allow them to download additional modules and display unwanted advertisements.

The malware was installed as a regular application, but without a user interface, and silently operated in the background. Analysts found that the program collected device information: screen resolution, model, and the ID of the connected Wi-Fi network.

Multimedia system manufacturers often use Android because it allows for convenient interface customization and the addition of system components, but this makes them vulnerable to malware.

Head units rarely store sensitive data, but they usually have SIM card slots and constant internet access for navigation and software updates. This turns them into a potential attack vector. Experts recommend installing applications only from trusted sources and keeping an eye on system updates.