Researchers Gained Control of Some Kia Models Using License Plate Numbers and a Simple Hack

Chris Teague
by Chris Teague

New vehicles are becoming more and more connected, bringing features and technologies that felt like science fiction a few years ago. That level of connectivity comes with considerable risk, however, as cars connected to the internet in any way creates a potential for hacking. While many vulnerabilities require a high level of skill and knowledge to exploit, a team of researchers recently discovered a new, much easier method for gaining access to connected cars.

The team announced that it had found a flaw in one of Kia’s web portals that gave them access to connected features in most of the automaker’s newer vehicles. They were able to exploit the flaw using a custom app to target vehicles and said they could quickly use the cars’ license plates to gain access to their location and other controls. The team could also remotely lock and unlock vehicles, honk their horns, and start the ignition.


Researchers told Kia of the problem in June, and the automaker seems to have closed the hole. It’s the second such vulnerability found in Kia’s systems, but the company is far from the only one at risk. A while back, Toyota’s supplier portal was hacked, giving researchers access to user data and more.

For now, the most significant problems have been found and reported by researchers and people with good intentions, but hackers’ ability to target vehicles and drivers based on license plate numbers, which are publicly visible at any time, should be a wake-up call that more serious problems could be ahead.


[Images: Kia]


Become a TTAC insider. Get the latest news, features, TTAC takes, and everything else that gets to the truth about cars first by subscribing to our newsletter.

Chris Teague
Chris Teague

Chris grew up in, under, and around cars, but took the long way around to becoming an automotive writer. After a career in technology consulting and a trip through business school, Chris began writing about the automotive industry as a way to reconnect with his passion and get behind the wheel of a new car every week. He focuses on taking complex industry stories and making them digestible by any reader. Just don’t expect him to stay away from high-mileage Porsches.

More by Chris Teague

Comments
Join the conversation
2 of 13 comments
  • Slavuta Slavuta on Oct 01, 2024
    Can they remotely push the clutch to start the 3-pedal car?.... get manual
  • Bd2 Bd2 on Oct 01, 2024
    I wouldn't be surprised if Toyota funded this kind of research in some pathetic effort to slow Kia's meteoric rise to the top of the market. South Korea is a vertically synergized country where companies cooperate in concert with the central government to spread the South Korean culture to the world and wash away all of the Japanese influences over the past decades. BTS, LG , Samsung, Hyundai, Kia, Genesis are the most respected and trusted brands anywhere. What a lowlife godless tactic.
  • Theflyersfan After the first hard frost or freeze - if the 10 day forecast looks like winter is coming - that's when the winter tires go on. You can call me a convert to the summer performance tire and winter tire car owner. I like the feel of the tires that are meant to be used in that season, and winter tires make all of the difference in snowy conditions. Plus, how many crazy expensive Porsches and Land Rovers do we see crashed out after the first snow because there's a chance that the owner still kept their summer tires on. "But...but...but I have all wheel drive!!!" Yes, so all four tires that now have zero grip can move in unison together.
  • Theflyersfan One thing the human brain can do very well (at least hopefully in most drivers) is quickly react to sudden changes in situations around them. Our eyes and brains can quickly detect another driving dangerously, a construction zone that popped up while we were at work, dense fog out of nowhere, conflicting lines and signs on some highways, kids darting out between cars, etc. All of this self driving tech has shown us that it is maybe 80% of the way there, but it's that last 20% that still scares the crap out of us. Self driving computers can have multiple cameras feeding the system constant information, but can it react in time or can it work through conflicting data - think of construction zones with lines everywhere, orange signs with new exit information by the existing green exit sign, etc. Plus, and I think it's just GM's test mules, some systems require preexisting "knowledge" of the routes taken and that's putting a lot of faith in a system that needs to be updated in real time. I think in the next 15-20 years, we'll have a basic system that can self drive along interstates and highways, but city streets and neighborhoods - the "last mile" - will still be self drive. Right now, I'd be happy with a system that can safely navigate the slog of rush hour and not require human input (tapping the wheel for example) to keep the system active.
  • Kcflyer night and day difference. Good winter tires save lives or at least body work. And they are free. Spend a few hundred on spare wheels on tire rack. Mount the winter tires on them. They replace your regular tires and save a commensurate amount of wear. Thus, over the life of the vehicle the only added expense is the extra wheels. I can usually find a set of used wheels for less than 400 bucks all in on craigslist or marketplace. Then swap the wheels yourself twice a year. TPMS has added a wrinkle. Honda has the best system that requires little or no expense. Toyota/Lexus has a stupid system that requires a shop visit to program every stinking time. Ugh (worth it over a honda since your valves don't need to be cleaned every 60000 miles)
  • Bruce Purchased (in 2024) a 1989 Camero RS. I wasn't looking for one but I picked it up for 1500. I wanted to only pay 800 but the fellow I bought it from had a real nice family and I could tell they loved each other. They needed the money and I had to give it to him. I felt my heart grow like the Grinch. Yes it has the little 2.8. But the write up does not represent this car. It has never been messed with, all original, a real time machine. I was very fond of these 3rd gen Cameros. It was very oxidized but straight, interior was dirty but all there. I just retired and I parked in my shop and looked at it for 5 months. I couldn't decide how to approach it now That I can afford to make of it what ever I want. Resto mod? Engine swap? No reason to expect any finacial return. Finally I started just doing little things. Buffed and polished the paint. Tune up, Fluids. I am still working it and have found a lot of joy in just restoring what I have just the way I found it just fixed and cleaned up. It's just a cool looking cruiser, fun to drive, fun to figure out. It is what it is. I am keeping it and the author of this critical write up completely misses the point. Mabey the point is what I make it. Nothing more and nothing less.
  • George Now that the Spark And Pretty Soon Gone is the Mirage I really wonder how are you going to get A low rental price when getting a loaner car for the week or more? Cars that are big as spark usually cost 5 to 10 dollars a day for use in a week rental agreement.Where as a SUV like a Equinox or a Rogue Midsize SUV would cost about 20 to 30 dollars for the same length of time of lease and since you’re getting more space leasing is going to be very expensive.
Next