# data[].attributes.body
1)The car-hacking attack saw the Impala’s OnStar computer system contacted via a phone call, and an MP3 file of different tones played to bamboozle the software, and trigger a buffer overflow vulnerability.

2)The attackers could then inject their own code into the car remotely, taking control of its systems.

Voice recognition:

1) Using deepfake voice and machine learning play it back to the car system to bypass the authentication

2)record the authorized user voice

Ultra sonic sound command injection

1)Vulnerable to inaudible commands in ultrasonic frequencies

2)They used a Dolphin attack that embeds the voice in ultrasonic signals

microphone pickup the voice and attacker can do any malfunction

prevent:

1)Smart phone authentication, PIN.

2)liveness detection- Detect differentiate between recorded voice and human voice.

3)Microphone Frequency filtering like ultrasonic.

4)Machine learning ai Detection can improve to reject the anomalous sound patterns using hidden commands attack.

# data[].attributes.body
ConnectedDrive uses a SIM card installed in the car to connect to a smartphone app over the internet. The owner can use the app to remotely switch on the heating or air conditioning, sound the horn, and lock or unlock the car.

# data[].attributes.custom_properties.MAgGWJMk
A German motorist association, created a fake mobile phone network and tricked nearby cars into connecting to it. From there, they could intercept communications with BMW's ConnectedDrive service and unlock the doors.  

# data[].attributes.custom_properties.QpzE041M
Adding HTTPS encryption to the connection between the vehicles and BMW's server.

# data[].attributes.attachment_link.readable_text
BMW has patched a security flaw which meant hackers could remotely unlock the doors of more than two million Rolls-Royce, Mini and BMW vehicles.

Researchers from ADAC, a German motorist association, created a fake mobile phone network and tricked nearby cars into connecting to it. From there, they could intercept communications with BMW's ConnectedDrive service and unlock the doors.

ConnectedDrive uses a SIM card installed in the car to connect to a smartphone app over the internet. The owner can use the app to remotely switch on the heating or air conditioning, sound the horn, and lock or unlock the car.

BMW said the researchers had "reverse engineered some of the software that we use for our telematics. With that they were able to mimic the BMW server."

The company said it has begun issuing an over-the-air software update to the 2.2 million affected vehicles, adding HTTPS encryption to the connection between the vehicles and BMW's server.

BMW added that it has not come across any cases where the hack had been used maliciously.

The vulnerability was unearthed as car makers seek to embed more technology than ever, prompting security experts to raise concerns over how safe the systems are.

Speaking to IBTimes UK last year, Mark O'Neill of software company Axway warned: "I think we are going to see more malicious attacks [on connected vehicles]. If someone finds a vulnerability in an internet-enabled car you could have the same situation that you have now for browsers...it doesn't take much imagination to think of the abuse this could cause."

But just as connected cars face the threat of malware and hacking, it also means software updates can be quickly distributed without calling vehicles back to the dealership. Tesla boss Elon Musk recently said the Model S P85D electric car will gain faster acceleration through a future software update.

Tesla also offers some control of its cars over the internet. Owners can log into an iPhone and Android app to control the heating, check how charged the batteries are, monitor the car's speed and position on a map, and unlock the doors.

# data[].attributes.attachment_link.title
BMW ConnectedDrive hack sees 2.2 million cars exposed to remote unlocking

# data[].attributes.attachment_link.description
Patch issued as more than two million BMW, Rolls-Royce and Mini vehicles exposed to remote unlocking hack

# data[].attributes.body
BMW said the researchers had "reverse engineered some of the software that we use for our telematics. With that they were able to mimic the BMW server."

# data[].attributes.body
they could plug their laptop into a network cable behind a Model S' driver's-side dashboard, start the car with a software command, and drive it. They could also plant a remote-access Trojan on the Model S' network while they had physical access, then later remotely cut its engine while someone else was driving.

# data[].attributes.custom_properties.QpzE041M
Both of these hacks require physical access to the car, at least initially, and they require control of the car's infotainment system, which has the ability to start the car or cut power to it.

# data[].attributes.attachment_link.title
Researchers Hacked a Model S, But Tesla’s Already Released a Patch

# data[].attributes.attachment_link.description
Two hackers figure out how to attack a Tesla Model S, yet also call it “the most secure car that we’ve seen.”

# data[].attributes.body
wirelessly hack a Corvette’s brakes using an insurance dongle

The concept of hacking a vechicle system such as the brackes on corvette useing OBD concern

Wired is reporting that hackers have found a weakness in the Uconnect multimedia system in corvettes. They demonstrated how they could take control of not just the car’s electronics but also everything from the air conditioning to the transmission and brakes.

# data[].attributes.body
The OBD attack isn’t limited to just Corvettes, or Chevrolets for that matter.

The researchers also told Wired that, while they were only able to tamper with the Corvette’s braking system at low speeds, the hack could be modified to grant access to other systems like the locks, steering, and transmission of most modern vehicles.

# data[].attributes.custom_properties.MAgGWJMk
The latter of which has a partnership with Uber. The researchers say they alerted Metromile to the vulnerability in June, and the company responded by wirelessly pushing security updates to the devices in question (including the ones in various Uber vehicles)

# data[].attributes.custom_properties.QpzE041M
wireless attack vectors on obd dongle is connnected to cellular or bluetooth network an attack

# data[].attributes.body
Mobile Devices and Metromile state that the vulnerability has already been patched, but the UCSD researchers claim that thousands of vehicles connected to other Mobile Devices distributors are still visible to their Internet search tools. The researchers urge drivers to take care. .

# data[].attributes.custom_properties.MAgGWJMk
"Think twice about what you're plugging into your car,