# data[].attributes.headline
why investing in automotive cyber security is important. 

# data[].attributes.subject
why investing in automotive cyber security is important. 

# data[].attributes.body
1 customer safety

2 to save trust of customers and brand image

3 comply with future regulatory rules for automotive market

4 and preventing financial loss

# data[].attributes.body
the similarity:

Remote Access or Remote Exploitation

Vulnerability in Communication Systems

Lack of Proper Security Measures

unsecured OBD ports

# data[].attributes.body
Differences in the Attacks:

Entry Point/Method : MP3 file, spoofed server, OBD port and entertainment, communication systems and malicious software (Trojan) to gain remote access.

# data[].attributes.body
1. Used MITM attack to intercept and impersonate BMW servers.

2. Used the access to remotely unlock the car.

ConnectedDrive uses a SIM card installed in the car to connect to a smartphone app over the internet. The owner can use the app to remotely switch on the heating or air conditioning, sound the horn, and lock or unlock the car.

3. reverse engineered some of the software that we use for our telematics. With that they were able to mimic the BMW server.

# data[].attributes.body
OnStar computer system

contacted via a phone call, and an MP3 file of different tones played to bamboozle the software, and trigger a buffer overflow vulnerability.

The attackers could then inject their own code into the car remotely, taking control of its systems.

# data[].attributes.body
Ways of executing cyber attacks:

Infotainment system (MP3 file)

Outdated software

DoS or DDoS attack

Dongle

Remote access

# data[].attributes.body
Disassembled dashboard, examined SD cards found.

Connected via proprietary ethernet port.

Gained access to entertainment system, above 5 mph can only disable accelerator.

# data[].attributes.body
they used obd port and connected a dongle to it and applyed the brakes using an text via sms.

The dongles were distributed to consumers in an insecure “developer mode”, according to the researchers, and configured to take commands via text message with little in security, which allowed the hackers to access a car’s critical systems.

# data[].attributes.body
habibi come to coventry 😂