Lexus cars may be vulnerable to viruses that infect them via mobile phones. Landcruiser 100 models LX470 and LS430 have been discovered with infected operating systems that transfer within a range of 15 feet. "If infected mobile devices are scary, just thinking about an infected onboard computer..," said Eugene Kaspersky, head of anti-virus research at Russian firm Kaspersky. "We do know that car manufacturers are integrating existing operating systems into their onboard computers (take the Fiat and Microsoft deal, for instance)." It is understood the virus could affect the navigation system of the Lexus models, it transfers onto them via a Bluetooth mobile phone connection. It is still unclear whether the cars in question use the Symbian operating system which has recently been under attack from various worms and viruses.Remember how the Y2K bug was going to render all our automobiles immoble? I laughed at that silly idea, but this one is actually plausible. A potential virus host requires two things: an operating system understood by the virus and a method of transmission. Obviously, there is no floppy disk drive in a Lexus, but it appears that they have implemented Bluetooth for diagnostic purposes. This is a fascinating development, both in the computer world and in the courtrooms. Once a virus injures or kills a person, coding them will become a much more serious crime. (As if causing billions of dollars of damage is not already serious enough!) This post is (fittingly) part of today's Beltway Traffic Jam. Go check out the rest of the clunkers!
Most cars with nav systems use some sort of input, usually a CD drive, to update their maps and such. Would that create a vulnerability?
Conceivable, but only if they were using an operating system that a virus was compatible with AND if the virus could embed itself in the data on the disk.
Example: A disk containing a single xml database which the nav system simply imported would be virus proof. Even if the virus could embed itself in the XML data, the program would never activate it because it would see it as data (and probably bad data) instead of a program.
Plus, the virus would have to get on the master gold copy of the disk prior to duplication. That has happened before but it is not a common occurrence.
As bluetooth devices continue to increase in popularity and number, that will probably provide the most transmission medium for phone and PDA viruses.
I guess I need Norton for my iPAQ.




http://king-of-fools.com/blog/trackback/1617/izYAdfCO/