Exploiting Bluetooth from Your Car to the Bank Account

Expanding Bluetooth Attack Surfaces

Over the past decade, vehicle infotainment systems and aviation flight controllers have integrated extensive Bluetooth wireless capabilities, creating new entry points for remote attackers.

BlueToolkit Testing and Replay Framework

Researchers introduced BlueToolkit, an open-source testing platform designed to discover, fuzz, and replay Bluetooth Classic implementation vulnerabilities.

Discovering 64 Vulnerabilities Across 22 Vehicles

Security assessments using BlueToolkit uncovered sixty-four zero-day vulnerabilities across modern automobile models and the Garmin Flight Stream avionics management system.

Privilege Escalation and Account Hijacking

Demonstrated attack vectors establish man-in-the-middle positions, exfiltrate sensitive driver data, and escalate privileges to hijack online user accounts.