Security researchers have identified a new strain of malware targeting Android-based in-car infotainment systems. The malware spreads via compromised software updates from a vendor in Hong Kong, highlighting risks in the connected car supply chain.