Hackers Take Over Outlander PHEV

Hackers Take Over Outlander PHEV

  • By Sydny Shepard
  • Jun 08, 2016

It’s funny how security plays a part in almost every aspect of our lives, including the “next big thing” in automotive: the connected car.

You asked for it, so car and tech companies are meshing together as one to create auto internet connectivity within the newest vehicles hitting the road. New cars are releasing with their own LTE modems and enabling remote apps for vehicle diagnostics or unlocking doors from the comfort of a phone or smartwatch.

But as we all know, anything that is connected to the internet, can and will be hacked. PenTestPartners proved that sentiment by hacking the Mitsubishi Outlander PHEV.

The Outlander allows you to access its remote functions by connecting to the car’s own Wi-Fi network. A Wi-Fi network that Mitsubishi did a really bad job at securing, according to PenTestPartners.

The firm bought their own Outlander to investigate the car’s security after releasing that the mobile app connected differently to the car than they had seen before. They found the pre-shared key easily crackable and the default SSID too formulaic. Once connected to a vehicle, one can play with the lights, or climate control, but the researchers discovered they could lock or unlock the doors remotely, and perhaps more seriously, they are able to turn off the car’s alarm.

PenTestPartners said they contacted Mitsubishi about the security hole. They said their findings were “greeted with disinterest.”

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

  • It's Show Time

    I am one of those people that likes to see things get bigger and better. As advertised, ISC West is going to be bigger (more exhibitors) and better (more attendees). It’s show time in Las Vegas. Read Now

    • Industry Events
    • ISC West

  • SIA Releases New Report on Operational Security Technology

    The Security Industry Association (SIA) has released an impactful new resource – Operational Security Technology: Principles, Challenges and Achieving Mission-Critical Outcomes Leveraging OST. Read Now

  • Cyber Overconfidence Is Leaving Your Organization Vulnerable

    The increased sophistication of cyber threats pumped by the relentless use of AI and machine learning brings forth record-breaking statistics. Cyberattacks grew 44% YoY in 2024, with a weekly average of 1,673 cyberattacks per organization. While organizations up their security game to help thwart these attacks, a critical question remains: Can employees identify a threat when they come across one? A Confidence Gap survey reveals that 86% of employees feel confident in their ability to identify phishing attempts. But things are not as rosy as they appear; the more significant part of the report finds this confidence misplaced. Read Now

  • Mission 500 Debuts Refreshed Identity Ahead of Security 5K/2K at ISC West

    Mission 500, the security industry’s nonprofit charity dedicated to supporting children in need across the US, Canada, and Puerto Rico, has unveiled a refreshed brand identity ahead of ISC West. The charity’s new look includes a modernized logo with refined messaging to reinforce Mission 500’s nearly decade-long commitment to serving the needs of children and families in crisis. Read Now

    • Industry Events
Most   Popular

New Products

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises.

  • HD2055 Modular Barricade

    Delta Scientific’s electric HD2055 modular shallow foundation barricade is tested to ASTM M50/P1 with negative penetration from the vehicle upon impact. With a shallow foundation of only 24 inches, the HD2055 can be installed without worrying about buried power lines and other below grade obstructions. The modular make-up of the barrier also allows you to cover wider roadways by adding additional modules to the system. The HD2055 boasts an Emergency Fast Operation of 1.5 seconds giving the guard ample time to deploy under a high threat situation.

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.