Security News

Hackers access surveillance cameras at Tesla, Cloudflare, banks, more
2021-03-09 22:25

Hackers gained access to live surveillance cameras installed at Tesla, Equinox, healthcare clinics, jails, and banks, including the Bank of Utah. In addition to images captured from the cameras, the hacker also shared screenshots of their ability to gain root shell access to the surveillance systems used by Cloudflare and at Telsa HQ. According to Tillie Kottmann, a reverse engineer for the group of hackers, they gained access to these surveillance systems using a super admin account for Verkada, a surveillance company who works with all of these organizations.

Agent Tesla Malware Spotted Using New Delivery & Evasion Techniques
2021-02-03 01:37

Security researchers on Tuesday uncovered new delivery and evasion techniques adopted by Agent Tesla remote access trojan to get around defense barriers and monitor its victims. Cybersecurity firm Sophos, which observed two versions of Agent Tesla - version 2 and version 3 - currently in the wild, said the changes are yet another sign of Agent Tesla's constant evolution designed to make a sandbox and static analysis more difficult.

Agent Tesla Trojan ‘Kneecaps’ Microsoft’s Anti-Malware Interface
2021-02-02 15:15

Researchers have identified new versions of the Agent Tesla remote access trojan that target the Windows anti-malware interface used by security vendors to protect PCs from attacks. The newly discovered variants have also adopted new obfuscation capabilities, raising the stakes for businesses to fend off the ever-evolving Agent Tesla malware.

Agent Tesla Keylogger Gets Data Theft and Targeting Update
2020-12-15 16:47

Six-year-old keylogger malware called Agent Tesla has been updated again, this time with expanded targeting and improved data exfiltration features. "Threat actors who transition to this version of Agent Tesla gain the capability to target a wider range of stored credentials, including those for web browser, email, VPN and other services," said Aaron Riley, cyber threat intelligence analyst with Cofense in a Tuesday analysis.

Tesla Hacked and Stolen Again Using Key Fob
2020-11-24 12:59

Researchers have demonstrated for the third time how hacking into the key fob of a Tesla can allow someone to access and steal the car in minutes. Researchers from the Computer Security and Industrial Cryptography, an Imec research group at the University of Leuven in Belgium, have "Discovered major security flaws" in the key fob of the Tesla Model X, the small device that allows someone to automatically unlock the car by approaching the vehicle or pressing a button.

Researchers Show Tesla Model X Can Be Stolen in Minutes
2020-11-23 14:17

Researchers from the Computer Security and Industrial Cryptography group at the KU Leuven university in Belgium have demonstrated that a Tesla Model X can be stolen in minutes by exploiting vulnerabilities in the car's keyless entry system. The attack method identified by the COSIC researchers targets the Tesla Model X key fob, which uses Bluetooth Low Energy to communicate with the vehicle.

Tesla Model X key fobs could be hacked to steal cars, fix released
2020-11-23 13:54

Researchers at the University of Leuven in Belgium found vulnerabilities in the keyless entry system of the Tesla Model X that would have allowed attackers to steal the $100,000 car within just a few minutes. The security bugs allowed taking full control of the key fob and of the car by remotely updating the Tesla Model X's BLE chip with specially crafted firmware.

Hundreds of Tesla Powerwall Gateways Potentially Exposed to Hacker Attacks
2020-11-17 15:51

Hundreds of Tesla Powerwall Backup Gateways may have been exposed to remote hacker attacks from the internet, but Tesla says it has taken steps to reduce risks. Tesla Powerwall is an energy storage product for homes that uses a battery to store power from solar panels or the grid, ensuring that users continue to have power even during an outage.

Russian Pleads Not Guilty in Foiled Tesla Ransomware Plot
2020-09-25 10:21

A Russian citizen accused of offering a Tesla employee $1 million to enable a ransomware attack at the electric car company's plant in Nevada denied wrongdoing Thursday before a federal magistrate judge. Kriuchkov, 26, also told U.S. Magistrate Judge Carla Baldwin that he knew the Russian government was aware of his case.

Tesla wins defamation counterclaim against Gigafactory whistleblower
2020-09-21 11:00

Tripp is the former Gigafactory technician who, after a brief stint at the Nevada facility in 2018, went to the press as a whistleblower with claims that defective battery packs in Tesla's Model 3 line of cars had become so much of a problem that Tesla was unable to meet the production target set by boss Elon Musk - 5,000 flash motors a week. Tripp countersued Tesla claiming defamation and false light.