TWCore: Legitimate System App Exploited for Malware Distribution

TWCore is a legitimate system app on DoFun head units that collects analytics and updates software via MQTT. Threat actors weaponized its update channel to deliver malware, marking a sophisticated supply chain attack.