How to hide a plane with a smartphone

On Wednesday, at the Hack in the Box conference in Amsterdam Hugo Teso, a computer security specialist, blew up the audience with his report . The Planesploit application he developed allows you to literally capture control of any aircraft within sight. True, the demo version of Epp, launched on the device under the control of Android, was tested only with simulators of aircraft. But the developer assures that with its help you can hide a real plane, "although it is dangerous and unethical." That is why Planesploit will never appear on Google Play.

The application uses vulnerabilities in the on-board software ACARS and ADS-B . The first is needed to exchange information between the aircraft and the airports, the second tells the aircraft data about what is happening around. Both systems are not protected in any way. All that is needed for the "hijack" of the aircraft is the smartphone and Planesploit connected to mobile communications. With the help of bugs, the EPP begins to load its own flight data into aircraft control systems, after which the ship actually goes under your control.

If you do not specifically come across and do not tease the pilots, they may not find out about the hack. Having got the control, you can throw oxygen masks in the cabin, make the instrument panel flash with all light bulbs or just to stand the plane on the earth's surface - Visit Ground is intended for this. Planesploit uses a gyroscope, and hypothetically, the flight direction can be changed, simply turning the smartphone in your hands.

Does this mean that the pilots are doomed if the hacker with a smartphone captures control? No, of course: the plane can only be stolen in the autopilot mode, and the ship’s team will always be able to turn it off if the penetration notices.

Despite the fact that the successful work of Planesploit was verified only in virtual simulation, Hugho Tesso has already sent its results to the European Aviation Security Agency. According to the agency, training aircraft systems inaccurately emulate the real control system of the aircraft, and therefore the hacker is unlikely to be able to capture the control of a real aircraft.