Activity 1 by

BMV ConnectedDrive

dasa18_1 — 2025-01-31 11:51:30 UTC

Used MITM attack to intercept and impersonate BMW servers.
Used the access to remotely unlock the car.
ConnectedDrive uses a SIM card installed in the car to connect to a smartphone app over the internet. The owner can use the app to remotely switch on the heating or air conditioning, sound the horn, and lock or unlock the car.
reverse engineered some of the software that we use for our telematics. With that they were able to mimic the BMW server.

patelk102 — 2025-01-31 11:53:13 UTC

the similarity:

Remote Access or Remote Exploitation
Vulnerability in Communication Systems
Lack of Proper Security Measures
unsecured OBD ports

Gm Impala

2025-01-31 11:54:06 UTC

OnStar computer system

contacted via a phone call, and an MP3 file of different tones played to bamboozle the software, and trigger a buffer overflow vulnerability.
The attackers could then inject their own code into the car remotely, taking control of its systems.

patelk102 — 2025-01-31 11:56:34 UTC

Differences in the Attacks:

Entry Point/Method : MP3 file, spoofed server, OBD port and entertainment, communication systems and malicious software (Trojan) to gain remote access.

Cyber Attacks

kanikowskf — 2025-01-31 12:02:03 UTC

Ways of executing cyber attacks:

Infotainment system (MP3 file)
Outdated software
DoS or DDoS attack
Dongle
Remote access

Tesla Model S

patelk102 — 2025-01-31 12:07:48 UTC

Disassembled dashboard, examined SD cards found.

Connected via proprietary ethernet port.

Gained access to entertainment system, above 5 mph can only disable accelerator.

corvette

patelk102 — 2025-01-31 12:10:13 UTC

they used obd port and connected a dongle to it and applyed the brakes using an text via sms.

The dongles were distributed to consumers in an insecure “developer mode”, according to the researchers, and configured to take commands via text message with little in security, which allowed the hackers to access a car’s critical systems.

dasa18_1 — 2025-01-31 12:21:06 UTC

habibi come to coventry 😂

dasa18_1 — 2025-01-31 12:27:41 UTC

patelk102 — 2025-01-31 12:28:59 UTC

dasa18_1 — 2025-01-31 12:29:25 UTC

why investing in automotive cyber security is important.

patelk102 — 2025-01-31 12:37:48 UTC

1 customer safety

2 to save trust of customers and brand image

3 comply with future regulatory rules for automotive market

4 and preventing financial loss