Researcher remotely controls BYD Shark 6 lights locks and cabin audio in authorised test

In an authorised test reported by ABC Four Corners on September 21, automotive security researcher Dan Hreszczuk remotely locked doors, operated wipers and washers, toggled headlights while the vehicle moved slowly, and played media through the infotainment system of a BYD Shark 6, while also tracking it and accessing in-cabin audio. He said the access path his team used had no password. He could not reach brakes or cameras and considered those well protected, and found no control over steering or acceleration. ABC did not publish the model year, software build, initial access method, affected versions, or a vulnerability identifier, so fleet-wide reproducibility remains unestablished.

Check

Treat this as a single prepared-vehicle demonstration, not a fleet-wide exploit, and track for a vendor advisory, affected builds, or independent replication before acting.

Affected

One BYD Shark 6 allowed remote control of lights, locks, wipers, and infotainment plus location tracking and cabin audio through an access path reportedly lacking a password.

Fix

For connected fleets, review remote-access authentication on comfort and telematics functions, segment them from safety systems, and press vendors for disclosure detail.