A BYD Shark 6 Hack Shows the Risks of Connected Cars
Researcher remotely hacked a BYD Shark 6, controlling lights, wipers and doors and eavesdropping via cabin microphone, exposing connected-car security gaps.
During a two-week test for ABC's Four Corners, Fortify Labs researcher Dan Hreszczuk found an unpassworded entry point into the BYD Shark 6's software and demonstrated remote control of door locks, headlights, wipers and the infotainment system while a reporter drove. He also tracked the vehicle's location in real time, activated the cabin microphone, and used a recorded 'Hey Siri' clip played through the speakers to make the driver's phone reveal a banking password, birth date and contacts. Brakes and cameras were protected by stronger security controls and resisted access. The report criticizes Australia's lack of minimum cybersecurity standards for connected cars and raises surveillance concerns over Chinese-made EVs.
- Unpassworded entry point gave access to software controlling many vehicle functions
- Headlights were switched off while the reporter drove at 30 km/h in the dark
- Cabin microphone captured a banking password; recorded 'Hey Siri' audio tricked the voice assistant
- Brakes and cameras were protected by stronger security measures
- Australia has no minimum cybersecurity standards for connected cars, the report says
- Vendors
- BYD
- Products
- BYD Shark 6Siri
- Organizations
- Fortify LabsFour CornersABC NewsASIO
From the original article
5 min read at securityaffairs.com
A BYD Shark 6 was remotely hacked, exposing vehicle controls, location tracking and cabin audio, raising serious connected-car security concerns. A journalist drove a BYD Shark 6 down a country road outside Canberra while a hacker sitting on the shoulder killed the headlights with a keystroke. That’s not a hypothetical.
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.