News
News Categories

Chrysler is recalling 1.4 million vehicles after video shows a Jeep Cherokee being hacked

By Kenny Yeo - on 27 Jul 2015, 9:54am

Chrysler is recalling 1.4 million vehicles after video shows a Jeep Cherokee being hacked

2014 Jeep Cherokee. (Image source: Motor Authority)

Chrysler has just announced that it is recalling 1.4 million vehicles after a video surfaced showing two hackers remotely controlling a Jeep Cherokee by way of its Internet-connected in-car entertainment system.

Specifically, the two hackers, Charlie Miller and Chris Valasek, attacked the car via Chrysler's UConnect system. UConnect was integrated into some of Chrysler's models since 2013 and security researchers have always believed that it could be susceptible to hacking.

Along with Wired, Charlie and Chris demonstrated how someone with the right skills and equipment could remotely control a 2014 Jeep Cherokee. In the video, Charlie and Chris can be seen blasting the car's speakers, activating the wipers, killing the engine, and even disabling the brakes.

Models affected include Dodge Vipers, Chargers and Challengers; Rams pickup trucks; Jeep Cherokees and Grand Cherokees. Owners can visit Chrysler at this website and enter their VIN number to see if they are affected. Affected owners will receive a USB drive containing a patch which can be updated through the USB port on the car's dashboard.

Chrysler also said that "network-level security measures" have been undertaken to prevent hackers from exploiting this bug. It also said, "The software manipulation addressed by this recall required unique and extensive technical knowledge, prolonged physical access to a subject vehicle and extended periods of time to write code."

According to reports, such a hack could be done because Chrysler failed to put a firewall between UConnect and vital systems that control the car. 

With cars becoming increasingly connected, the prospects of a car being remotely controlled by a hacker is frightening. Security researchers plan to investigate this issue further at next month's Defcon hacking conference.

Source: Wired, The Verge

Join HWZ's Telegram channel here and catch all the latest tech news!
Our articles may contain affiliate links. If you buy through these links, we may earn a small commission.