DrainDead: Emptying Batteries of Parked Electric Vehicles
summary
Claim: an attacker can use DC charging protocol access to actively discharge parked EV batteries and steal energy. A lab rig named Dr. Kunigund prototype (1,000 V lab supply with drain mode + open‑source CCS stack) performs the attack and automates tests across many cars via partner FSD. Results: most makes can be drained, VW cuts session after ~60s, Tesla blocks after ≈5 kWh but can be restarted, BMWs failed to enter full charge loop.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:57AC vs DC charging protocols
- 3:21EV charging communication layers
- 5:07Dr. Kunigund interface
- 7:16Testing charging/discharging
- 8:41FSD collaboration for tests
- 10:49Test results on vehicle models
- 11:54Key findings on discharging
- 12:35Q&A
related talks
17mHotWire: Real-World Impersonation and Discharge Attacks on Electric Vehicle Charging...
31mProtecting the Attack Surface and Data Silos of an EV Charging Network
29mX-in-the-Middle: Attacking Fast Charging Piles and Electric Vehicles
34mBack-connect to the Connected Car. Search for Vulnerabilities in the VW Electric Car.
16mCAUTION: HIGH VOLTAGE, LOW SECURITY – A Familiar Tale of...
37mAutomatic Automotive Hacking
43mElectric vehicle CAN man-in-the-middling
14mCharge It to My Neighbor: A Relay Attack on ISO 15118 Plug and Charge Payment