New Attack On Car Security: “CAN Injection”

CANbus is a mini-LAN built into every car manufactured this century. It is increasingly being used for all kinds of functions, like controlling “smart headlamps”, and of course unlocking the doors and letting you get into the car and drive off. Now it turns out that there are ways to connect to the bus through weak points from outside the vehicle, for example by breaking into the connections for those “smart headlamps”. From here, you can do things like spoof signals from the smart key receiver, fooling the security system into thinking it has received a signal from a valid owner’s key when it hasn’t. And once you’ve done that, you can steal the car. Because, of course, components on the bus are trusting the signals they get from other components, aren’t they? <https://www.theregister.com/2023/04/06/can_injection_attack_car_theft/>
participants (1)
-
Lawrence D'Oliveiro