Shubham Shah and Sam Curry chained a ForgeRock WAF bypass into code execution on the identity systems of two automakers, then demonstrated remote vehicle control in the US.
It’s Toyota/Lexus. And these researchers have hacked most brands, including bmw, Mercedes, ford, Honda, Acura, Kia, Hyundai, Nissan, Infiniti, rolls Royce, Ferrari, Porsche, Jaguar, and any car that has start with Sirius XM. https://samcurry.net/web-hackers-vs-the-auto-industry
Worth noting that by the time Ghost Dog came out, those handheld unlock devices were already in use. Remote lock/start hasn’t been a secure feature at any point. ☝🏼
For anyone who doesn’t want to dig through the article, they obfuscated the manufacturers and didn’t name them.
It’s Toyota/Lexus. There’s a video with the cars.
Probably Hyundai/Kia since they already had a similar problem
It’s Toyota/Lexus. And these researchers have hacked most brands, including bmw, Mercedes, ford, Honda, Acura, Kia, Hyundai, Nissan, Infiniti, rolls Royce, Ferrari, Porsche, Jaguar, and any car that has start with Sirius XM. https://samcurry.net/web-hackers-vs-the-auto-industry
Worth noting that by the time Ghost Dog came out, those handheld unlock devices were already in use. Remote lock/start hasn’t been a secure feature at any point. ☝🏼