Electric Vehicles and Hacking (1)
Electric vehicles have seen their popularity explode over the past decade. Growing awareness of environmental issues and the desire to reduce greenhouse gas emissions are encouraging many users to buy. However, with this transition to greener and more modern transportation, a new threat that we don’t necessarily think about has emerged: the hacking of electric vehicles and charging stations. This recent phenomenon is raising growing concerns among manufacturers, charging station operators and end users. In this article, we will explore the vulnerabilities that make these technologies susceptible to hacking, and the associated risks.
The Rise of Electric Vehicles
Not only do electric vehicles represent a cleaner alternative to combustion-engine vehicles, they also incorporate advanced technologies that improve quality of life, such as connectivity, automation and driver-assistance systems.
They are notably equipped with sophisticated computer systems that control battery management and engine performance, but also safety, navigation, and communication functions. These systems, connected via mobile apps or online platforms, can become prime targets for hackers. Indeed, unauthorized access to these systems could make it possible to manipulate critical vehicle functions, such as disabling safety systems, changing driving settings, or even stealing the vehicle itself.
AgencePDN gets pirated content removed: see our solutions by sector.
The main risks of electric vehicle hacking
The main threats to these vehicles are the following:
- Theft and remote control
Electric vehicles are often connected to the Internet and can be tracked remotely. A hacker could exploit these connections to locate, lock or even start a vehicle remotely in order to steal it or to hack personal data.
In theory, a cybercriminal could disable anti-theft protections or security devices, or even manipulate braking or steering systems to cause accidents. For the time being, however, after investigation, in all reported incidents of this kind, the vehicle owner had previously shared their login credentials or given control of their app.
- Intrusion into Communication Systems
Electric vehicles are often equipped with wireless communication systems, such as Bluetooth, Wi-Fi or 4G/5G. These connections can be exploited by hackers to intercept sensitive communications between the vehicle and remote servers, which can allow the theft of personal data, such as navigation or payment information or driving histories.
Battery Degradation
Electric vehicle batteries are a key element of their operation and performance. A cyberattack could change its state of charge, alter its operation, or even cause its premature degradation. This could not only harm the vehicle’s performance, but also compromise the driver’s safety.
Hacking charging stations: vulnerable infrastructure
Modern charging stations are often connected to remote management networks, allowing operators to monitor and control the charging stations. These remote connections, while useful, can also be entry points for cyberattacks. If charging stations are not properly secured, they can be compromised and used to cause harm to users or infrastructure.
Charging stations are responsible for delivering energy to electric vehicles. It is therefore in theory possible to manipulate the system to change charging rates or even bypass payment, or even divert energy.
As with any computer system, it is also possible to introduce malware into the stations’ management system, which could not only disrupt the proper operation of the stations, but also infect other devices connected to the network, including the electric vehicles themselves.
Charging stations are often connected to online payment systems and to databases that store personal information. A hack of these systems could compromise sensitive information such as users’ banking data or personal contact details. This represents a major risk to users’ privacy and security.
Hackers could also use charging stations as an entry point for distributed denial-of-service (DDoS) attacks by taking control of several stations.
Vulnerabilities that need nuance
It seems that some vehicles are harder to hack than others; the new Tesla models, the best-known and best-selling brand of electric vehicles, are regularly presented at hacker conventions. In 2022, the Tesla 3 was hacked in less than three minutes on a key feature: remote start. In January 2024, Tesla took part in Pwn2Own in Tokyo, and the hackers again managed to get into the system, but this time they could only get into less critical components: the infotainment system and the charging station.
Entire teams of “white hat” hackers, benevolent hackers who seek to detect vulnerabilities in many products to help manufacturers fix them, are now working on the issue. It therefore seems that manufacturers take these questions seriously and are actively interested in minimizing the risk as much as possible.
Join us in mid-December for our last article of 2024; we will look together at the steps to take to best avoid falling victim to these attacks. In the meantime, if you have a film, a series, software or an ebook to protect, don’t hesitate to call on our services by contacting one of our account managers; PDN has been a pioneer in cybersecurity and anti-piracy for more than ten years, and we certainly have a solution to help you. Happy reading, and see you soon!
Share this article
