A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that ...