Exploiting Bluetooth from Your Car to the Bank Account

Infotainment Attack Surface Expansion

Modern automotive infotainment and aviation flight management systems increasingly integrate Bluetooth Classic stacks, often operating with unpatched firmware due to complex update logistics.

Introducing the BlueToolkit Framework

Researchers developed BlueToolkit, an open-source testing framework designed to systematically test, fuzz, and replay Bluetooth Classic protocol vulnerabilities.

Disclosing 64 Zero Day Vulnerabilities

Applying BlueToolkit uncovered sixty-four new vulnerabilities across twenty-two vehicle models and the Garmin Flight Stream aviation management system.

Man in the Middle and Account Hijacking

Demonstrated exploits show how implementation flaws enable attackers to establish man-in-the-middle positions, exfiltrate sensitive data, and escalate privileges to hijack user accounts.