Corvette Cyber Attack by Nirmith Puneet

Corvette: Researchers remotely applied the brakes of the vehicle using a dongle installed into the car’s OBD port. This dongle allowed them to send commands to the car’s internal systems.

puneetn2 — 2025-01-31 11:46:12 UTC

Method of Attack

puneetn2 — 2025-01-31 11:55:50 UTC

Hackers from the University of California at San Diego exploited a security hole in a dongle plugged into the vehicle's onboard diagnostics (OBD) port. They communicated with the target vehicle by sending text messages. The text messages allowed them to gain access to the Corvette's CAN bus, which connects the car's electronic components.

Actions Taken

puneetn2 — 2025-01-31 11:56:27 UTC

Hackers used text messages to turn on and off the windshield wipers. They applied and disabled the brakes remotely. This was a proof-of-concept exercise, but with more work, hackers could potentially control other vehicle functions like car locks, steering systems, and transmissions.

Security Problems

puneetn2 — 2025-01-31 11:56:57 UTC

Many dongles are not secure because manufacturers may not fully understand how they can be exploited. Dongles can be flipped into "developer mode," increasing the potential for malicious actions. Dongles connected to cellular networks can be accessed from anywhere in the world

puneetn2 — 2025-01-31 11:57:36 UTC

All attacks involved exploiting vulnerabilities in the car's electronic systems. Remote access was a common goal, allowing attackers to control various functions of the vehicles. Researchers demonstrated these vulnerabilities to highlight the need for better security measures in modern vehicles.