As cyber security becomes an increasingly important factor in our world, a security consultant by the name of Hugo Teso has built an Android app that highlights how vulnerable some of our basic infrastructures are. Called PlaneSploit, the hack is capable of remotely hijacking an airplane.
"I can influence the guidance and navigation of the aircraft," Teso told the BBC."It requires some careful planning and timing to achieve results."
A commercial pilot for 12 years and an IT consultant for 11 years, Teso didn't outright take control of a plane, but was able to feed a simulator plane false navigation data, leading it on a path of his choosing. He demonstrated his app at the Hack In The Box conference in Amsterdam.
Teso pointed out that the Aircraft Communications Addressing and Reporting System (ACARS), the system used to transmit text messages between the ground and plane, is pretty much unguarded. By exploiting ACARS, Teso was able to lead the plane's autopilot where he wanted it to go with navigation data he uploaded.
"I expected them to have security issues but I did not expect them to be so easy to spot. I thought I would have to fight hard to get into them but it was not that difficult," Teso said.
Teso carried out his simulation using old airplane parts bought off eBay.
Avation authorities expressed interest in finding out more from Teso, such as ways to counter these vulnerabilities and what bugs exist.
No word on whether an iOS version PlaneSploit was developed.