Millions of cars exposed to remote hacking via PerfektBlue attack

Researchers analyzed the BlueSDK Bluetooth framework by OpenSynergy and found vulnerabilities that could lead to remote code execution and information leaks. They combined these flaws in a method called the PerfektBlue attack, allowing hackers to infiltrate a car's infotainment system. This could enable them to track the vehicle's location, record audio, and access phonebook data.

While it's not yet demonstrated, this attack could potentially grant control over critical functions like steering and wipers. The attack targets recent infotainment systems in models from Mercedes-Benz, Skoda, and Volkswagen.

Exploitation requires the hacker to be within Bluetooth range, sometimes needing user interaction.