We recently published about one hack Jeep Cherokee. The car was connected to the Internet, which the hackers took advantage of and gained access to the driving system. So reasonably, cars that are not connected to the Internet are not in danger, right?
Error! Brakes and other critical systems can be compromised with it Mission data by radio waves through an attack on in digital audio broadcasting (DAB) or digital audio broadcasting.
The attack is similar to the hack that allowed security researchers Chris Valasek and Charlie Miller take control of a Jeep Cherokee, after sending data to the infotainment and navigation systems via mobile phone.
However, NCC's attack method shows that even cars whose systems are not connected to mobile networks may be vulnerable.
Ο Andy Davis, διευθυντής researchς του NCC, εξήγησε ότι η επίθεση μπορεί να γίνει από ένα φορητό υπολογιστή. Το σύστημα Infotainment ενός στοχευμένου αυτοκινήτου μπορεί να χρησιμοποιηθεί σαν ένα σκαλοπάτι για να επιτραπεί η πρόσβαση στον hacker σε όλα τα κρίσιμα συστήματα, όπως τα συστήματα διεύθυνσης και πέδησης.
Depending on the power, a DAB broadcast could be used to attack many cars simultaneously.
"[The intruder] would probably pick a popular radio station to make sure that the attack would reach a large number of vehicles."
This approach has only been tested in the laboratory. Davis said he managed to get to the automatic braking system of a real vehicle through the handling of the car's entertainment system.
The NCC does not indicate which Infotainment system is vulnerable. We will learn more during the official presentation of the attack, which will be held at the conference Black Hat which will take place in Las Vegas next month.
