Researchers Prove How They Can Stop a Corvette with a Simple Text Message

Since a couple of hackers found a way to remotely control a Crysler, we’ve heard a lot of similar successful attempts on other vehicles. The latest comes from researchers over at the University of California, who have taken an interest in third-party devices coupled to the TCUs.

The TCUs are directly linked to a vehicle’s Controller Area Network bus, who sends and receives messages from all systems. The thing is that TCUs also have a SIM card to send data back to the manufacturer or insurance companies. This is how the researchers were able to discover, target and compromise a Corvette’s systems with just a simple text message.

The researchers made a two-staged attack, first by updating the device’s software, then making use of funnel commands which could be sent directly to the CAN bus. They were able to prove on a Corvette that they can remotely start the windshield wipers and ally the breaks while the car was moving.

In the researchers’ paper, they state that finding mobile numbers for TCU SIMs is fairly easy, having assigned numbers that start with the 566 area code. They also said that the TCUs are not cryptographically signed, allowing them to install the malicious software update without the TCU knowing and that TCU NAND flash units share the same SSH key, allowing hackers to use it on other TCUs.

Thank you PCWorld for providing us with this information