Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
Explore critical security vulnerabilities in domestic electric vehicle charging infrastructure through this 30-minute conference talk from Recon 2025. Discover how researchers Riccardo Mori and Robin David uncovered serious security flaws in the Autel MaxiCharger, a widely-used charging station for both business and domestic applications that was featured in Pwn2Own Automotive 2025. Learn about the growing attack surface created by the rapid 25% worldwide increase in EV adoption and the emerging risks associated with home charger sharing features that allow public advertising of domestic charging stations. Understand the methodology used to reverse-engineer the Firmware-Over-The-Air (FOTA) update functionality from the Android mobile app, including techniques for unpacking the SecNeo packer and breaking the custom cipher encrypting the firmware through cryptanalysis. Examine two distinct exploit chains that achieve arbitrary code execution: one leveraging vulnerabilities in the Bluetooth Low Energy (BLE) stack and another exploiting USB vulnerabilities. Gain insights into post-exploitation techniques for maintaining persistence across firmware updates and factory resets, and discover how compromised charging stations can serve as attack vectors to infiltrate electric vehicles through charging protocols, domestic networks, and potentially create botnets of compromised chargers.
