Ransomware Targeting Automobiles

Abstract

Ransomware has consistently been the top threat to security in recent years. It seems inevitable that ransomware developers will ultimately target automobiles. As vehicles get smarter and more connected, the threat surface widens and automobiles naturally become more vulnerable to Internet-based threats such as ransomware. In this paper, we identify the constraints on ransomware in the context of automobiles and demonstrate potential ransomware attacks. The demonstrations entail attack vectors targeted at the IVI system and the methodology for implementing a hybrid crypto ransomware on an IVI system. Finally, we clarify the new ransomware strategies that the attackers could leverage in the context of vehicular systems with the intent to promote research to prevent such attacks.