EVs Under Siege: How Hackers Can Hijack Your Electric Car & How To Stop Them

Cybercriminals can exploit vulnerabilities in an EV’s controller area network (CAN), allowing them to manipulate crucial components.

Charging infrastructure is a notable weak link in EV cybersecurity.

Source : Freepik

As electric vehicles (EVs) continue to gain popularity, so do concerns over their cybersecurity vulnerabilities. Modern EVs rely heavily on connectivity and digital control systems, making them potential targets for hackers. From remote takeovers to compromised charging stations, cyber threats pose significant risks to vehicle safety and user data. This report explores key security challenges and measures that EV manufacturers and drivers can adopt to mitigate cyber risks.

How Hackers Can Exploit EV Systems

EVs are equipped with multiple connectivity options such as Wi-Fi, Bluetooth, and cellular networks, which support essential functions like diagnostics, telematics, infotainment, and driver assistance systems. However, weak security protocols in these communication channels can leave vehicles exposed to cyberattacks.

Cybercriminals can exploit vulnerabilities in an EV’s controller area network (CAN), allowing them to manipulate crucial components such as regenerative braking, powertrain controls, and advanced driver assistance systems (ADAS). In extreme cases, attackers could trigger sudden acceleration, abrupt stops, or even tamper with pedestrian detection mechanisms, putting both passengers and pedestrians at risk.

Malware infections present another critical risk, especially through unsecured over-the-air (OTA) firmware updates and compromised applications. By injecting malicious code, hackers can alter vehicle software, disrupt functions, and gain unauthorised access. Additionally, digital keys — including NFC cards, mobile key apps, and key fobs — can be intercepted or cloned, allowing cybercriminals to gain control over the vehicle.

Dangers Of Compromised Charging Stations

Charging infrastructure is another weak link in EV cybersecurity. Public charging stations that lack adequate security protections can be remotely hijacked, enabling hackers to manipulate charging speeds, disrupt charging cycles, or force rapid power fluctuations between alternating current (AC) and direct current (DC). Such tampering can lead to battery damage, thermal runaway, or, in extreme cases, even fires or explosions.

Wired conductive chargers are particularly at risk due to the absence of secure, end-to-end encryption, making them more vulnerable to cyberattacks. In contrast, wireless charging systems often incorporate stronger authentication measures, reducing the likelihood of unauthorised access. While residential EV chargers are less prone to physical tampering, they still face threats from remote cyber intrusions.

Strengthening EV Security Measures

Although large-scale cyberattacks against EVs remain rare, security researchers have demonstrated numerous ways hackers could exploit vulnerabilities. This highlights the urgent need for a robust cybersecurity approach. Manufacturers must prioritise security-first designs, integrating protective measures across hardware, firmware, applications, and operational systems.

To safeguard their vehicles, EV owners should regularly update software, use multi-factor authentication for digital keys, and rely on secure charging stations whenever possible. As the EV market continues to expand, proactive cybersecurity measures will be essential to ensuring the safety of drivers and passengers alike.