Hackers Can Steal Tesla's EVs With New Tricky Relay Attack

Name: Hackers Can Steal Tesla's EVs With New Tricky Relay Attack
Uploaded: 2022-09-14T12:53:11Z
Duration: 50 s
Description: A new relay attack has proven successful in stealing Teslas, but hackers need to work in teams, and one needs to get within 2 inches of your key card or phone.

In order for the hack to work, two attackers are required, and one must get within two inches of your key card or smartphone.

tesla nfc relay attack

00:50

Steven Loveday

By: Steven Loveday

Sep 14, 2022 at 8:53am ET

Add InsideEVs as a preferred source in Google

Comment

It seems criminals are always looking for new ways to steal cars, and Tesla's EVs are a welcome target. Cars are still relatively hard to get, and Tesla's vehicles are selling for top dollar. One would think that with all the new technology and security systems on cars, they'd be harder to steal. And while they are, that technology also opens up doors for hackers and techies to work their magic.

A recent video published by IOActive shows a brief clip of two attackers stealing a Tesla Model Y. The process appears to be very quick and relatively easy, but it can prove tricky. Basically, once the Tesla owner exits the car and begins to walk away, one person must be near the car and ready to unlock it. Meanwhile, the other criminal needs to walk very closely with the Tesla owner to get within two inches of their key card or smartphone.

According to a related article published by Electrek, a security research team at IOActive was able to reverse engineer Tesla's NFC protocol to show that an NFC relay attack can prove successful in stealing a Tesla EV.

In short, IOActive uses the protocol that Tesla's vehicles need to communicate between the car and its keys. The company then uses a Proxmark RDV4.0 device that can relay the NFC communications over Bluetooth and or Wi-Fi.

It may sound complicated, and you don't really need to fully understand it to know it's possible. When you watch the short video example, it should make more sense. IOActive also shared the details of the attack in a white paper. The following details from the white paper were published by Electrek:

"This relay attack requires two attackers; in this case, one of the attackers will be using the Proxmark device at the vehicle’s NFC reader, and the other can use any NFC-capable device (such as a tablet, computer, or for the purposes of this example, a smartphone) close to either the victim’s Tesla NFC card or smartphone with the Tesla virtual key."

What do you think?

View

Comments

Depending on the situation, it may or may not be difficult for an attacker to get within two inches of a Tesla owner's key or phone. Doing so without raising red flags or being able to later be identified could prove difficult. The researchers assume the hack may be able to be carried out from further distances, but they haven't yet tested it out.

Read These Related Tesla Articles:

Police Warn Tesla Owners That Thieves May Be After Their Cars

Hacker Says He Has ‘Full Remote Control’ Of Over 25 Teslas

While many cars are stolen each day on our shores, interestingly, Tesla's vehicles aren't high on the list. Every Tesla comes with a built-in camera-based Sentry Mode security feature, and there's also an optional "PIN to Drive" feature you can set up for increased security. Now that Tesla has been made aware of this potential vulnerability, it will likely begin work on an over-the-air software update to combat it.

Sources: IOActive (YouTube), Electrek

We want your opinion!

What would you like to see on Insideevs.com?

Take our 3 minute survey.

- The InsideEVs team

Share this Story

GO TO COMMENTS

(

)

Got a tip for us? Email: tips@insideevs.com

View all comments ( )

Trending

Kia EV3 Lease Deals Are Here, And It’s Cheaper Than The Chevy Bolt And Nissan Leaf

I Let Android Auto Plan My EV Roadtrip. Here’s How It Worked

This Chevy Bolt Has 470,000 Miles. Here’s How Much A New Battery Was

Here's What It's Like To Take Delivery Of A Rivian R2