Skip to main content

Jeep hackers return to remotely hack Cherokee’s digital systems

Just a year after they caused Chrysler to recall 1.4 million Jeep Cherokee vehicles after showing how they could remotely hijack a jeep’s digital systems over the internet, Charlie Miller and Chris Valasek are back to show how it could get worse. In the 2015 attack, they first toyed with the vehicle’s air conditioning, entertainment system and windscreen wipers, before cutting the transmission and causing the jeep to slowly come to a halt. At the Black Hat USA 2016 conference this week the two automot
August 4, 2016 Read time: 2 mins
RSSJust a year after they caused 1958 Chrysler to recall 1.4 million Jeep Cherokee vehicles after showing how they could remotely hijack a jeep’s digital systems over the internet, Charlie Miller and Chris Valasek are back to show how it could get worse.

In the 2015 attack, they first toyed with the vehicle’s air conditioning, entertainment system and windscreen wipers, before cutting the transmission and causing the jeep to slowly come to a halt.

At the Black Hat USA 2016 conference this week the two automotive cybersecurity researchers will outline new methods of cyber attack against the same Jeep Cherokee they hacked last year.

According to Miller and Valasek, hackers usually inject CAN messages on to the vehicle's network. However, there are often many limitations on what actions the vehicle can be forced to perform when injecting CAN messages. While an attacker may be able to easily change the speedometer while the car is driving, he may not be able to disable the brakes or turn the steering wheel unless the car he is driving meets certain prerequisites, such as travelling below a certain speed.

In their presentation, they plan to discuss how physical, safety critical systems react to injected CAN messages and how these systems are often resilient to this type of manipulation.

They will also outline new methods of CAN message injection which can bypass many of these restrictions and demonstrate the results on the braking, steering, and acceleration systems of an automobile. They end by suggesting ways these systems could be made even more robust in future vehicles.

Related Content

  • Autonomous vehicles – saviour and threat, says report
    November 1, 2016
    A new report from IDTechEx Research notes that autonomous vehicles need no pilot, not even one in reserve. Many truly autonomous vehicles are unmanned mobile robots prowling everywhere from the ocean depths to nuclear power stations, the upper atmosphere and outer space. They create billion dollar businesses such as aircraft and airships aloft for five to ten years on sunshine alone carrying out surveillance or beaming the internet to the 4.5 billion people who lack it. Independence of energy and electri
  • Cloudview brings CCTV into the digital age
    March 18, 2014
    According to UK company Cloudview, its Cloudview VSaaS (video surveillance as a service) solution harnesses current technology to provide a security system to remotely monitor people. Comprising a small yet highly intelligent visual network adapter (VNA) connected to the company’s cloud-based visual network system (VNS), Cloudview is a scalable, user-friendly and affordable platform. It can be managed and accessed from a browser using a notebook, tablet or smartphone, anywhere in the world, to extend sur
  • Global number of car sharing users to reach 650 million by 2030
    March 12, 2015
    Car and ride sharing is just one example of the new on-demand economy allowing real-time matching of supply and demand through connected smartphone applications. According to ABI Research, successive forms of vehicle sharing approaches represent paradigm shifts in uptake and popularity; each new generation seeing adoption rates at least an order of magnitude larger than the previous: Car sharing 1.0 - street rental service: Cars parked on the street can be located, unlocked, used, and left behind. Examples
  • Dignity should be key measure of MaaS success
    December 4, 2020
    Money isn’t everything: what if we made dignity into the key measure of success for MaaS? Crissy Ditmore sets out her vision statement for the industry’s developers