Modern vehicles increasingly include internet-connected entertainment, navigation and communication systems that receive software updates.
Security researchers documented malware distributed through legitimate update mechanisms used by some Android-based vehicle head units running DoFun firmware.
The malware could deliver advertising-fraud and proxy-botnet components.
The reported activity primarily affected the Android head-unit environment rather than core vehicle-control systems. However, the method of delivery demonstrates an important cybersecurity risk: attackers can compromise software-update infrastructure that users normally trust.
Kenyan fleet operators, transport companies, vehicle integrators and organisations operating connected vehicles should maintain inventories of installed systems and verify firmware and software-update sources.
Unnecessary internet exposure should be restricted and vendor security guidance followed where affected equipment is identified.
As Kenya adopts more connected transport technologies, vehicle cybersecurity and software supply-chain assurance will become increasingly important components of transport resilience.