Lookout! Electric Scooters Getting Hacked

You may own one. If not, it’s a safe bet that you’ve seen them–lots of them. Two wheel electric scooters have headlights and brake lights, disc brakes, and quick acceleration. Electric scooters may look like a lot of fun­­–or just plain crazy–depending how you look at them. Ride sharing company Lyft and Bird, a scooter-specific transportation company have joined the ranks using the Xiaomi M365 as a travel choice for their customers. Electric scooters are the choice of many as a personal EV (Electric Vehicle). It’s cheap, fun, and dependable transportation–until recently.

Researchers from Zimperium, a mobile security firm, recently discovered a critical error in the M365 model electric scooter made by Xiaomi, a Chinese electronics company. Among the components allowing the scooter to function is a Bluetooth module, allowing owners to navigate their scooters via smartphone. This Bluetooth function is the heart of the problem–and it’s very easily hacked. A Zimperium researcher discovered the weakness, allowing him to remotely control the scooter, including braking and acceleration. When Xiaomi was notified by researchers about the easy and dangerous hack, their reaction was less than admirable, saying they were aware of the problem but had no idea how to fix it. At least they are honest?

Cybersecurity researchers find the hacking problems facing the Xiaomi 365 are part of a bigger issue. Securing the IoT (Internet of Things) is a growing concern, as more devices are becoming part of it, with very little to no way of securing their Internet interactions. As with the Xiaomi 365, with more devices becoming part of Bluetooth technology in the IoT, securing them is an ongoing challenge.

For less than $500 to buy, riders can go up to 15-16 mph and travel as many as 18+ miles on one charge. For many, it’s a great alternative for getting around, including riding to work or just having fun with friends. However, use them with caution, keep your apps that control them and your mobile device updated at all times, and always wear a helmet.