The use of small Unmanned Aerial Vehicles (UAVs) otherwise known as Drones are rapidly increasing in popularity. The Parrot AR Drone was originally revealed at the International CES 2010 conference in Las Vegas, as a quadricopter helicopter which you can control with your smartphone or tablet. Some of the features include: two built-in cameras, it's easy to fly, and can be controlled without too much danger of it losing stability and crashing into other objects.
Recently a hacker named Rahul Sasi has found and exploited a backdoor in Parrot AR Drones that allows the flying machines to be remotely hijacked.
Sasi (@fb1h2s) said the backdoor could be exploited for Parrot drones within wireless range.
"Once my program kills the actual drone controllers, it causes the motors to stop and the drone falls like a brick," Sasi said.
The code is different to other previous attack methods as it bypasses authentication and does not rely on cutting and then commandeering wireless connections.
The research, will be presented next month at Nullcon, this could potentially give attackers control of drones or access to video feeds, some of the features that will be discussed at the conference are listed below:
- Silently installed on the drone.
- Covertly interacts with with the device drivers and sensors
- Lets the attacker control the drone remotely
- Allows an escape from the victim to the attacker
- Remote surveillance.
- Can spread to other drones