Owners of vehicles with onboard computers should brace themselves for an onslaught by hi-tech criminals who are causing havoc by infecting the devices with viruses.
Those with systems such as satellite navigation have been warned to secure the devices, after reports last week that the on-board computers of several Lexus models in the United States had been infected via cellphones.
And security experts in South Africa believe it is only a matter of time before local vehicles are targeted.
Ian Melamed, principal consultant at Shaya Technologies in Johannesburg, said computer viruses were now so widespread, they were starting to attack new devices such as cellphones and even on-board computers in cars. “If a device can carry data, it can carry a computer virus,” he said.
Melamed said about 150 000 cars in the US had been affected last week.
“Many of the vehicles also had their security codes breached,” said Melamed, a former computer expert with Interpol. “And with our high car theft and hijacking rate, it is only a matter of time before car owners in South Africa become targets. It is only a matter of time before these criminals (in the US) brag about their achievements on the Internet and spread the information on how to spread the virus or breach a vehicle’s computer security code.”
Many of the vehicles had satellite navigation systems linked to hands-free phone kits, via wireless Bluetooth technology and this was likely how the on-board systems of the cars had become infected, said Melamed.
“We are already starting to see a significant jump in the number of viruses affecting mobile devices such as cellphones and hand-held computers,” Melamed said. “As technology becomes more mobile, it is becoming increasingly important to guard against virus infections.
Although the viruses found on mobile devices are less advanced than those found on traditional computer networks, experts have warned that this will not be the case for long.
“We expect to see more elaborate viruses targeting mobile devices – viruses that are able to cripple those machines or steal the information housed in them,” said Melamed.
Melamed warned owners of such devices to always disable Bluetooth connectivity when possible.
“On-board devices in vehicles and mobile devices so readily available all pose a serious risk, once activated on a universal platform,” he said.
Automobile Virus Update
Lexus cars may be vulnerable to viruses that infect them via mobile phones. Landcruiser 100 models LX470 and LS430 have been discovered with infected operating systems that transfer within a range of 15 feet.
It seems that no one has done this yet, and the story is based on speculation that a cell phone can transfer a virus to the Lexus using Bluetooth. But it's only a matter of time before something like this actually works.
As for virus attacks and embedded systems well... Some (mainly older systems) are immune which are ROM based with insufficient RAM/Registers for executable code to be stored or operated. Until recently this would almost certainly have been true for all automobile based systems, however some now use FLASH ROM's and even smart/memory cards.
I guess a consequence of cheaper memory and short software development cycles requiring upgradeability as a standard is that we will get people developing attacks in exactly the same way as for motherboards in PCs. I guess it will soon be possible for my fridge to be made to think it's a microwave oven or a coffee machine with results that would delight and amuse a 7 year old attacker.
Automobile Viruses and DSRC from Thinking About Technology suggests how DSRC increases vulnerability. DSCR allows high-speed communications between vehicles and the roadside, or between moving vehicles, suggests other scenarios that could be more serious. What if a car thief can call his pick of any of a new model of a high end car and make it shut its engine off, all he needs for carjacking is a threatening demeanor. Worse yet, if he can call the police cars behind him and tell them to shut down, he has an excellent chance of escaping his pursuers.
