elduderino

http://www.infosecnews.com/news/inde...&newsType=News

Mobile virus infects Lexus cars
by David Quainton

Lexus cars may be vulnerable to viruses that infect them via mobile phones. Landcruiser 100 models LX470 and LS430 have been discovered with infected operating systems that transfer within a range of 15 feet.
"If infected mobile devices are scary, just thinking about an infected onboard computer..," said Eugene Kaspersky, head of anti-virus research at Russian firm Kaspersky. "We do know that car manufacturers are integrating existing operating systems into their onboard computers (take the Fiat and Microsoft deal, for instance)."

It is understood the virus could affect the navigation system of the Lexus models, it transfers onto them via a Bluetooth mobile phone connection. It is still unclear whether the cars in question use the Symbian operating system which has recently been under attack from various worms and viruses.

"At this stage it's still early but it just goes to show that technology has consequences," said David Emm, senior technology consultant at Kaspersky. "It's scary stuff."

Vulnerable operating systems are increasingly moving onto a number of different devices. Last year the Slammer worm infected 13,000 Bank of America ATMs as a result of them moving to a Windows-based operating system.

"I've even seen screenshots of major commercial aeroplanes with Windows 2000-based operating systems," said Mikko Hypponen, director of anti-virus research at Finnish firm F-Secure. "Cars are an obvious target for viruses. It's okay if you don't use the operating system for the engine and the brakes, but when you do..."

Bill Gates is a known Lexus driver. In 1999 he auctioned one for charity.

When contacted Lexus declined to comment.

SiGGy

heh, ya I read that earlier today pretty amusing.

Be funny if you could shut down the ECU. Be funny to go race some dude in a lexus with bluetooth and shut him down while racing. It'd also be amusing to do from a stop light.

Tsx536

Yeah..I just read about this in the TL forum. Pretty crazy. Good thing....I only have aftermarket bluetooth.

iterationX

Its not likely that Lexus is infectable. The bluetooth virius runs on symbian phones. and it affects other symbian phones, (so it contains symbian binaries, in order to install it you need to click yes to accept the file and click yes to run it) Bluetooth will transfer data (voice data) to your Navi, if the Navi doesnt handle data correctly, you could buffer overflow or something, but even if you did, the phone virus would need to contain binary lexus navi code, which btw. runs micro iTron, so the possibility is wickedly slim. Sounds like a fun project though. Microsoft is already in a bunch of navis, they're could be security issues there, but we'll have to wait and find out.