BYD Shark 6 hack highlights security gaps in Australian Chinese electric cars

Cybersecurity specialist Dan Hreszczuk, co‑founder of Fortify Labs, spent two weeks trying to break into a BYD Shark 6 hybrid ute. He succeeded without needing a password, gaining remote access to the vehicle’s digital systems.

From his lab, Hreszczuk was able to lock the doors, switch the headlights and wipers on and off, play music through the speakers and even activate the car’s microphone to record conversations. He could not reach the brakes or the cameras, which remained protected.

The test matters because Chinese manufacturers dominate Australia’s electric‑vehicle market. This year, more than half of all new EV sales in the country came from Chinese brands, and BYD is China’s biggest EV maker.

Australia currently has no minimum cybersecurity standards for cars, unlike the rules that already apply to connected household appliances such as washing machines or vacuum cleaners. This means manufacturers are not required to keep vehicle software up to date or to manage cyber‑risk systematically.

Australia’s intelligence agency, ASIO, has warned government officials that using Chinese‑made EVs for sensitive conversations could expose them to surveillance and data‑sharing with Chinese authorities. The agency’s alert reflects concerns that the cars’ microphones and data links could be exploited.

The combination of high market share, weak regulatory safeguards and the ability to remotely control basic vehicle functions shows a clear security gap. Experts say the government needs specific cyber‑security standards for cars to protect both personal safety and national security.

Until such rules are introduced, owners of Chinese electric vehicles remain vulnerable to remote interference, and the data they generate could be accessed without their knowledge.

COPYRIGHT DISCLAIMERS

4English does not own the rights to this content. All rights belong to the owner. 4English only uses this content to help users learn English via the app's features. Contact to request the removal of your content: contact@4englishapp.com.

Práctica de escucha