Hackers are now injecting code into the Electronic Control Unit (ECU) of cars, including headlight wiring, enabling criminals to gain keyless vehicle access.
Ian Tabor, a cybersecurity researcher specializing in automobiles, discovered the new Controller Area Network (CAN) injection attack technique while investigating how his Toyota RAV4 was stolen. His findings were detailed by Ken Tindell, CTO of Canis Automotive Labs, in an April 3 blog post. Tabor’s car was stolen after criminals hacked into the vehicle’s system using a device plugged into a wiring harness behind the headlights, enabling them to unlock the car and drive it away.
After his vehicle was stolen, Tabor checked the “MyT” telematics system used by Toyota to track vehicle abnormalities called Diagnostic Trouble Codes (DTC). He found that his vehicle had recorded several DTCs before the theft….