While Tesla users particularly appreciate the automaker’s ingenious and ultra-convenient keyless entry system, Sultan Qasim Khan, cybersecurity researcher at the NCC Group, recently exposed one of the biggest flaws in this technology across the world. hacking a Tesla.
Hacking a Tesla : Unlocking and starting a Tesla car is child’s play !
For Tesla brand users, the keyless entry and start system for their electric vehicle is undoubtedly the comfort option they would not give up for anything in the world. The problem is that if this technology offers maximum comfort of use, it is above all very easy to thwart. And that is what Sultan Qasim Khan has to prove. This by demonstrating the hacking of the Tesla Model 3 and Y.
Generally speaking, the hack is not complicated at all. Indeed, since the car constantly sends a presence signal intended for the contactless key via BLE technology, it is enough to redirect the signal thanks to a fault at the level of the data link layer to spoof the signal from the original owner. and trick the entry system.
Clearly, the hacker will convince the Bluetooth receiver that all proximity conditions are met. Once done, it will cause the unlock messages to be sent. This will allow thieves to open and leave with the car, without any break-in. And this feat only takes 10 seconds.
Note that this type of hacking nevertheless requires a certain level of skill.

-
An infinite listing of susceptible products
The sort of demonstration accomplished with the aid of using Khan isn’t new. And neither does this type of hacking. Indeed, for years, cybersecurity experts have time and again confirmed the vulnerability of keyless systems. And it is now no longer pretty much cars. In fact, any product with BLE era is prone to a relay attack.
The NCC Group researcher drastically carried out relay assaults in opposition to a extensive variety of gadgets so as to check their resistance. To cite only:
- Cars with digital unlocking
- Laptops with Bluetooth Unlock
- smartphones
- Kwikset Kevo Smart Locks
- Building get admission to manipulate systems
- Medical Patient Asset Tracking

-
Tesla hack: no change planned at Tesla
Although Khan revealed the flaw in the contactless key system to Tesla, the firm does not consider it a major risk. In fact, even if the keys of Tesla Models 3 and Y can be hacked, being able to open the car does not mean being able to start it. Moreover, there is no evidence that shows that hackers have ever used this type of hacking to bypass the brand’s vehicles.
Moreover, as this flaw directly affects the components, no update is possible. To best secure its system, Tesla should therefore modify its hardware and permanently change its keyless entry system. Chise that she has not planned for the moment.