We recently published about one hack Jeep Cherokee. The car had an Internet connection, which the hackers took advantage of and obtained access στο σύστημα οδήγησης. Οπότε λογικά, cars that are not connected to the Internet are not at risk, right?
Error! Brakes and other critical systems can be compromised by sending data over radio waves through an attack on in digital audio broadcasting (DAB) or digital audio broadcasting.
The attack is similar to the hack that allowed security researchers Chris Valasek and Charlie Miller to take control of a Jeep Cherokee, after sending data to the entertainment and navigation systems via cell phone.
However, NCC's attack method shows that even cars whose systems are not connected to mobile networks may be vulnerable.
Andy Davis, NCC's research director, explained that attack can be done from a laptop computer. The Infotainment system of a targeted car can be used as a stepping stone to allow access to the hacker in all critical systems such as steering and braking systems.
Depending on the power, a DAB broadcast could be used to make them happen attacks in several cars at the same time.
"[The intruder] would probably pick a popular radio station to make sure that the attack would reach a large number of vehicles."
This approach has only been tested in the laboratory. Davis said he managed to get to the automatic braking system of a real vehicle through the handling of the car's entertainment system.
The NCC does not indicate which Infotainment system is vulnerable. We will learn more during the official presentation of the attack, which will be held at the conference Black Hat which will take place in Las Vegas next month.
