Security · High impactFan score 2 · Tier D
Researchers pwn automakers’ Android apps to remotely unlock cars, honk horns
The Register · By Connor Jones ·
The Brief
- Security researchers exploited flaws in automakers' Android apps to gain remote access to connected cars from two major automakers.
- The researchers were able to start engines, flash headlights and sound horns remotely.
- Shubham Shah of Assetnote and researcher Sam Curry worked together on the research.
Why it matters
Remote vehicle features exposed through mobile apps can be abused if their backend and app authentication are weak, so developers of connected-car or similar IoT apps should review how remote commands are authorised.
Who’s affected
- Owners of connected cars from two major automakers
- #security
- #automotive
- #android
- #iot
- #vulnerability
Security researchers exploited flaws in Android apps to gain remote access to connected cars from two major automakers, allowing them to start engines, flash headlights, and sound horns. Shubham Shah, co-founder at Assetnote, and researcher Sam Curry worked together on the…