In the fast-evolving world of automotive technology, keyless entry and start systems have become a standard feature in modern vehicles. These systems rely on RFID technology to detect the presence of a car key nearby, allowing drivers to unlock and start their vehicles without physically handling the key. However, this convenience comes with a hidden risk — a vulnerability that has recently been exposed by 360's Radio Security Research Department.
At BlackHat, the world’s most prestigious cybersecurity conference held in Las Vegas, 360 researchers presented groundbreaking findings on how these keyless systems can be remotely exploited. Their research revealed that the sensing distance of a car’s key detection system is typically limited to about one meter. But through technical analysis, they discovered that this range can be extended to tens or even hundreds of meters using specialized tools. This means that a vehicle could be unlocked and started from a significant distance, even when the owner is far away.
During a live demonstration, 360 researchers showcased how easily this could happen. An employee parked a brown car on the roadside, locked the doors, and placed the key in his pocket before walking away. Despite being several tens of meters away, the researchers used a small device resembling a charging case to capture the key’s signal. Another researcher then used a tool to relay the signal back to the car, tricking it into thinking the key was nearby. Within minutes, the door was opened, and the car was started without any physical interaction.
The method involves building a "bridge" between the key and the vehicle. By amplifying the key’s radio signal, the car’s system is deceived into believing the key is close by. This technique, while not new, was previously expensive and complex, requiring high-end equipment. However, 360’s research shows that it can now be done with relatively low-cost tools, making the threat more widespread.
Li Jun, a researcher at 360, explained that several major car brands are vulnerable due to the use of similar communication protocols. The risk isn’t isolated to one manufacturer; it affects multiple models across different brands. To mitigate this, 360 has already notified manufacturers and urged them to update their communication modules to enhance security.
For everyday users, one temporary solution is to store the car key in a Faraday cage or a metal-lined bag to block signals. However, this approach is inconvenient for regular use. The long-term fix lies in improving the communication protocols themselves, which 360 is actively working on with industry partners.
As more vehicles become connected to the internet, the need for robust cybersecurity measures is growing. 360’s Vehicle Network Security Center, established in collaboration with universities and automotive companies, is leading the charge in securing the future of smart cars. Their secure big data platform is already operational, providing real-time threat monitoring and sharing critical security insights with the automotive and cybersecurity industries.
With the rise of vehicle connectivity, the importance of protecting digital assets in cars cannot be overstated. As 360 continues to push the boundaries of automotive security, the message is clear: convenience must never come at the cost of safety.
Peek Braided Sleeve,Cable Sleeve,Heat Resistant Braided Sleeving,Braided Wire Wrap
Shenzhen Huiyunhai Tech.Co., Ltd. , https://www.cablesleevefactory.com