“This is the first documented case of a malware infection chain specifically created for the targeted car head unit.”
Kaspersky traced JarService to DoFun’s own update app, so the supply chain delivered it. The MoYu group behind BadBox now rents your dashboard out as a residential proxy and runs ad fraud through it. Nobody patches a car stereo. The device sits in your driveway for eight years running whatever shipped on it.