Researchers hack the Mitsubishi Outlander SUV, shut off alarm remotely

After discovering the SSID and the pre-shared key, they connected to a static IP address within a network’s subnet, and this allowed them to sniff the Wi-Fi connection and send messages to the car.

Through these messages they were able to turn the car’s lights, air conditioning and heating on and off, change the charging programme and, most importantly, to disable the car’s anti-theft alarm.

Mitsubishi is currently working on new firmware for the Wi-Fi module that should fix these flaws. Until they push it out, they advised owners to deactivate the Wi-Fi using the “Cancel VIN Registration” option on the app, or by using the remote app cancellation procedure.