In 2015, security researchers Kevin Mahaffey and Marc Rogers demonstrated a remote attack on the Tesla Model S by injecting a Trojan (malware) into the car’s system. Their attack exploited multiple vulnerabilities in the vehicle’s software, which allowed them to gain control over critical features.

1. Initial System Access (USB Exploit):

   • The researchers physically connected a laptop to the car using an Ethernet cable hidden behind the driver’s dashboard.

2. Remote Access via Wi-Fi:

   • Once the Trojan was installed, they could wirelessly connect to the car remotely.

   • They bypassed Tesla’s authentication system and took control of several car functions.

3. Vehicle Control Manipulation:

   • 
     

     • Remotely unlock the doors.

     • Turn off the car’s display screen (making the driver unable to see speed, battery level, etc.).

• They exploited weaknesses in communication, software, or hardware.

• Attacks on GM, BMW, and Tesla were executed remotely.

• Tesla’s attack was malware-based, unlike the others that were network attacks