News

No Need to Shoot Down Nuisance Drones – Hack Them Instead

The proliferation of consumer drones in the last decade has been a boon for remote-control flying enthusiasts and filmmakers, but not so much for public servants – like police and fire services – not to mention normal people, either concerned for their privacy or just annoyed over the flying devices invading their personal space. In the US, at least, an increasingly common response to nuisance drones is to shoot them out of the sky. New work, undertaken by researchers, though, reveals that there may be a more effective (and more insidious) method of dealing with problem drones: hacking them.

Developed by PacSec Security, the drone hijacker is a radio transmitter that can seize control of any operational drone, even in mid-flight. Once the hijacking device takes control of a drone, the original operator loses all control over it. The hijacking device, which is capable of controlling any drone that communicates over DSMx, was presented by researcher Jonathan Andersson at the PacSec hacking conference in Japan on Wednesday (26th October).

“It’s not a jamming system so I am not competing for control via RF power,” Andersson told Vulture South (via The Register). “Full flight control is achieved with the target experiencing a complete loss of control — it’s a clean switch-over. The range of my proof of concept implementation is equal to a standard DSMx radio transmitter, though standard 2.4GHz ISM band amplification can be applied to extend the range.”

“In the defense and security world, there are people who have done this,” Robi Sen, the founder of counter-drone product maker Department 13, told Ars Technica. “There are also a few hackers who have done this but have not made their research public. To my knowledge, this is the first time that this has all been presented, in a complete package, publicly.”

In addition to drones, vulnerable DSMx-based systems include RC aeroplanes, cars, and boats. While the vulnerability could be remedied by updating the firmware of DSMx receivers, the majority of devices are unable to be accessed in such a manner by users since they are lacking in Wi-Fi or other internet and data transfer connectivity.

“The shared secret (‘secret’ used loosely as it is not encrypted) exchanged is easily reconstructed long after the binding process is complete by observing the protocol and using a couple of brute-force techniques,” Andersson wrote in an e-mail to Ars Technica. “Further, there is a timing attack vulnerability wherein I synchronize to the target radio’s transmissions and transmit a malicious control packet ahead of the target, and the receiver accepts my control information and rejects the target’s.”

“My guess is that it will not be easy to completely remedy the situation,” Andersson added. “The manufacturers and partners in the ecosystem sell standalone radio transmitters, models of all kinds, [and] transmitters that come with models and standalone receivers. Only a certain set of standalone transmitters have a firmware upgrade capability, though the fix is needed on the model/receiver side.”

Ashley Allen

Disqus Comments Loading...

Recent Posts

LG 27″ 27GS60QC-B 2560×1440 VA 180Hz 1ms A-Sync HDR10 Curved Widescreen Gaming Monitor

Natural curve, 1000R is just the beginning. It's a gaming revolution with satisfying 180Hz speed,…

6 hours ago

ASUS ROG Azoth 75 RGB Wireless Gaming Keyboard White Frame

ROG Azoth gaming keyboard with 75 keyboard form factor, gasket mount, three-layer dampening foam and…

6 hours ago

AOC 27″ Q27G4X 2560×1440 IPS 180Hz 1ms FreeSync Gaming Monitor

Introducing the Q27G4X, a fusion of gaming excellence and cutting-edge technology. Dive into yourself in…

6 hours ago

Kingston Fury Beast 16GB (2x8GB) DDR4 PC4-28800C17 3600MHz Dual Channel Kit

ColourPrimary ColourBlackSecondary ColourGreySetSetYesNumber of products in set2LightingLighting / RGBNoCooler SpecificationsHeatsink includedYesMemoryMemory size (total)16 GBMemory TypeDDR4Memory…

6 hours ago

Kolink Rocket Heavy Vented Edition Aluminium Mini-ITX Case

New and improved Kolink Rocket Heavy with additional venting Mini-ITX case manufactured from premium materials…

6 hours ago

ASRock Confirms Full Support for Ryzen 9 9950X3D and Ryzen 9 9900X3D CPUs

ASRock has officially announced that its AM5 motherboards will fully support the new AMD Ryzen…

6 hours ago