Researchers hack Mitsubishi car alarm through Wi-Fi
Researchers from Pen Test Partners have successfully hacked into the Mitsubishi Outlander’s car theft alarm using Wi-Fi. A security expert discovered vulnerabilities in the car’s console, which potentially gives hackers remote access to the vehicle, and the ability to steal it after disabling its alarm. Mitsubishi embedded the Wi-Fi module in the car to allow owners to connect with the company’s mobile app and to send commands to the car. The researchers found that Mitsubishi used a weak Wi-Fi access security key, which can be hacked using ‘brute force.’ Once hacked, a Man in the Middle (MitM) attack between the user’s home Wi-Fi network and the car’s access module was used to compromise the system.

UPCOMING WEBINAR 🔐 Mastering API Security: Understanding Your True Attack Surface Discover the untapped vulnerabilities in your API ecosystem and take proactive steps towards ironclad security. Join our insightful webinar! Join the Session

"Some were spotted while driving and others when parked at their owner's house," security researcher Ken Munro said. "A thief or hacker can therefore easily locate a car that is of interest to them."

From GPS system to satellite radio to wireless locks, today vehicles are more connected to networks than ever, and so they are more hackable than ever.It is not new for security researchers to hack connected cars . Latest in the series of hackable connected cars is the Mitsubishi Outlander plug-in hybrid electric vehicle (PHEV).A security expert has discovered vulnerabilities in the Mitsubishi Outlander's Wi-Fi console that could allow hackers to access the vehicle remotely and turn off car alarms before potentially stealing it.The company has embedded the WiFi module inside the car so that its users can connect with their Mitsubishi mobile app to this WiFi and send commands to the car.Researchers from security penetration testing firm Pen Test Partners discovered that the Mitsubishi Outlander uses a weak WiFi access security key to communicates with the driver's phone.The key to getting into the Wi-Fi can be cracked through a brute force attack (""), according to researchers. In fact, "Once cracked, the researchers captured the handshake or connection process between the driver's phone and the car.The researchers then used a man-in-the-middle (MitM) attack between a driver's home WiFi network and the car's access module to spy on the data flowing between the Mitsubishi app and the car, and compromise the car's system.The researchers were then able to mess with the air conditioning system, turn lights on/off, push the car to charge on premium-rate electricity, change the car's charging settings, drain the battery, and most disturbing, break into the car and turn the car's anti-theft alarm off.Another issue with the vehicle is that the name of each Outlander's Wi-Fi network is distinctive.Since the company has sold more than 100,000 Mitsubishi Outlander PHEV worldwide, the hack would not be a great news for its users.A short-term fix for car owners is to unpair all devices from their vehicle's WiFi module. For this, go to the app's "" and select the "" option.Once all paired devices are unpaired, the car's Wi-Fi module will effectively go to sleep.Mitsubishi responded to the issue by saying that "this hacking is a first for us as no other has been reported anywhere else in the world," and that it is working with Pen Test Partners to fix the issues permanently.