zhima: Reverse Proxy Module Used in Car Head Unit Malware

zhima is a reverse proxy module documented by Nokia Deepfield Emergency Response Team. It is selectively delivered via IPTV apps and now via car head unit malware, allowing attackers to route traffic through infected devices for proxy botnet operations.