A researcher found that a recent update lets anyone enroll their own key during the 130-second interval after the car is unlocked with an NFC card.
A malicious version of Teslakee that Herfurt designed for proof-of-concept purposes shows how easy it is for thieves to surreptitiously enroll their own key during the 130-second interval. The attacker then uses the Teslakee app to exchange VCSec messages that enroll the new key.
All that's required is to be within range of the car during the crucial 130-second window of it being unlocked with an NFC card. If a vehicle owner normally uses the phone app to unlock the car—by far the most for Teslas—the attacker can force the use of the NFC card by using a signal jammer to block the BLE frequency used by Tesla's phone-as-a-key app.As the driver enters the car after unlocking it with an NFC card, the thief begins exchanging messages between the weaponized Teslakee and the car. Before the driver has even driven away, the messages enroll a key of the thief's choice with the car. From then on, the thief can use the key to unlock, start, and turn off the car.
Herfurt has successfully used the attack on Tesla Models 3 and Y. He hasn't tested the method on new 2021+ facelift models of the S and X, but he presumes they are also vulnerable because they use the same native support for phone-as-a-key with BLE.The vulnerability is the result of the dual roles played by the NFC card. It not only opens a locked car and starts it; it's also used to authorize key management.The attack exploits Tesla's way of handling the unlock process via NFC card.
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Christopher John Rogers Gave the Y2K Spiky Updo A Modern Update At His Latest ShowKey hairstylist Naeemah LaFond created the look inspired by “growing up in Brooklyn in the 90’s”.
Read more »
New NYC gun czar A.T. Mitchell speaks about violence gripping the 5 boroughsMayor Eric Adams' newly appointed gun czar, A.T. Mitchell, said Thursday addressing the issues that create the violence are key to stopping the violence. Details:
Read more »
Conrad Ricamora Creates His Own Seat at the TableThe actor, who stars in the new Hulu film ‘Fire Island,’ uses his craft as a venue for honest Asian American and queer representation.
Read more »
Tesla Has Over 3 Years' Worth of Cybertruck Orders — MaybeDemand for electric vehicles is higher than ever, and orders for Tesla’s EVs are piling on relentlessly. Even the Tesla Cybertruck
Read more »
Futurist Who Used 'Metaverse' for First Time in 1992 is Now Building His Own Virtual World | CoinMarketCapThirty years on from Snow Crash, futurist Neal Stephenson is teaming up with 'cryptocurrency pioneer' Peter Vessenes to bring their very own virtual world to life.
Read more »
China's BYD Will Soon Start Supplying Tesla With Its Batteries | CarscoopsChina's BYD Will Soon Start Supplying Tesla With Its Batteries | Carscoops carscoops
Read more »