Information lying open in vehicles can often be seen from the outside if privacy screens have not been adequately implemented. This can attract the attention of potential attackers.
Vehicles are often left in publicly accessible car parks or moored at boat docks that are not protected by the corresponding organisation’s central protective safeguards (e.g. gatekeeper services or locked garages). In principle, this increases the risk of unauthorised entry. Insecure locking systems can be a weak point in this regard. For example, keyless locking systems can be easily bypassed by relay attacks.
IT systems, accessories, information, and software can thus often be manipulated, destroyed, or stolen more easily if they are left unattended in vehicles instead of on the respective organisation's premises. If IT systems, accessories, information, or software are manipulated or destroyed, it often restricts the ability of the employees in vehicles to work. The IT systems affected could even be manipulated by malware to forward the data they process to unauthorised third parties (for example). Furthermore, it may be necessary to replace destroyed IT components, which requires both financial and personnel resources.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)