Skip to content
Automotive

Remote-Based App Exposed Thousands Of Vehicles To Hackers

By Sarah Chen
1 min read
remote car app
remote car app
In this article (5)

A hacker who goes by the handle Jmaxxz has exposed a series of vulnerabilities in a remote-based automobile app that may have exposed around 60,000 cars to hackers.

In a talk at the Defcon hacker conference in Las Vegas on Saturday, Jmaxxz identified several issues in a system called “MyCar” — developed by Canadian company Automobility, Wired reported.

Based on a scan of MyCar’s exposed database, Jmaxxz estimates that there were roughly 60,000 cars left open to theft by security bugs, with enough exposed data for a hacker to even choose the make and model of the car they wanted to steal.

MyCar’s devices and apps connect to radio-based remote start devices like Fortin, CodeAlarm and Flashlogic using GPS and a cellular connection to extend their range using an Internet connection.

Jmaxxz claims that the danger of these glitches are beyond theft or remote alarm-triggering pranks. Remotely starting a car without the owner’s knowledge could lead to dangerous carbon monoxide leaks which could be fatally dangerous.

Addressing the matter, MyCar’s parent company has said that all the resources at their disposal have been used to promptly address the situation, the report added.

Questions & Answers

Q.

What is the name of the app identified with security vulnerabilities?

A.

The app with the security vulnerabilities is called “MyCar.” It was developed by a Canadian company named Automobility, and its issues were presented at the Defcon hacker conference.

Q.

How many vehicles are estimated to have been affected by these vulnerabilities?

A.

Jmaxxz, the hacker who exposed the vulnerabilities, estimates that roughly 60,000 cars may have been left open to theft. This estimate is based on a scan of MyCar’s exposed database.

Q.

What are some of the potential dangers highlighted beyond vehicle theft?

A.

Beyond theft and remote alarm-triggering pranks, the remote starting of a car without the owner’s knowledge could lead to dangerous and potentially fatal carbon monoxide leaks.

Q.

Which company manufactures the 'MyCar' system?

A.

The 'MyCar' system, which connects to remote start devices, is developed by a Canadian company called Automobility. Its parent company has stated that they are addressing the situation.

Reader pulse

How concerned are you about IoT car security?

21,929 votes so far

Weekly Briefing

Asia's retail intelligence, in your inbox

Monday, Wednesday and a Friday Weekly Wrap: the retail stories, numbers and moves that mattered across Asia. Nothing else, and you can unsubscribe in one click.

  • Top industry moves and market shifts
  • Weekly data-driven analysis from across Asia
  • Monday, Wednesday and the Friday Weekly Wrap

Read by retail operators, investors and brand teams across Asia.

Protected by a quick human check. No spam, ever. Unsubscribe in one click.

SecureGDPR ready