Hackers Take Over Outlander PHEV

Hackers Take Over Outlander PHEV

It’s funny how security plays a part in almost every aspect of our lives, including the “next big thing” in automotive: the connected car.

You asked for it, so car and tech companies are meshing together as one to create auto internet connectivity within the newest vehicles hitting the road. New cars are releasing with their own LTE modems and enabling remote apps for vehicle diagnostics or unlocking doors from the comfort of a phone or smartwatch.

But as we all know, anything that is connected to the internet, can and will be hacked. PenTestPartners proved that sentiment by hacking the Mitsubishi Outlander PHEV.

The Outlander allows you to access its remote functions by connecting to the car’s own Wi-Fi network. A Wi-Fi network that Mitsubishi did a really bad job at securing, according to PenTestPartners.

The firm bought their own Outlander to investigate the car’s security after releasing that the mobile app connected differently to the car than they had seen before. They found the pre-shared key easily crackable and the default SSID too formulaic. Once connected to a vehicle, one can play with the lights, or climate control, but the researchers discovered they could lock or unlock the doors remotely, and perhaps more seriously, they are able to turn off the car’s alarm.

PenTestPartners said they contacted Mitsubishi about the security hole. They said their findings were “greeted with disinterest.”

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

New Products

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises.

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions.

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities