A BYD Shark 6 was hacked during a controlled cybersecurity test in Australia. A researcher demonstrated remote control of the headlights, wipers, door locks, speakers, infotainment and the cabin microphone though not the brakes or cameras.
The details matter here more than the headline, so let us set them out properly.
What Actually Happened
Cybersecurity researcher Dan Hreszczuk was given a Shark 6 for two weeks as part of an ABC investigation into vehicle cybersecurity. The exercise was designed to explore what remote access to a connected car could allow.
He reported finding a digital access point that was not password protected. That is as much technical detail as belongs in an article like this the vulnerability concerns vehicles currently on the road, and nothing here should help anyone reproduce it.
What Could and Could Not Be Controlled
| Function | Access demonstrated |
|---|---|
| Headlights, wipers, washer | Yes |
| Door locks | Yes |
| Speakers and infotainment | Yes |
| Cabin microphone | Yes |
| Vehicle location | Yes |
| Brakes | No |
| Cameras | No |
That last pair is the most important line in this story. The safety-critical systems were reported as better protected and were not reached. Several functions were operated while the vehicle was being driven, which is serious enough being unable to see through a suddenly activated wiper or a blacked-out headlight is a real hazard but this is not a case of someone taking control of a moving car's braking.
The Microphone Is the Uncomfortable Part
Remote access to a cabin microphone means conversations inside the car can potentially be heard. Combined with location data, that is a meaningful privacy exposure.
The demonstration went further: audio captured through the vehicle, combined with an unlocked phone nearby and its voice assistant, could be used to surface personal information. Notice what that requires the car alone is not the whole chain. A locked phone breaks it.
Is Every Shark 6 at Risk?
This test does not establish that. One vehicle was examined, by a specialist, with unrestricted physical access for two weeks.
That is a very different scenario from a stranger in a car park. It does not mean the finding is unimportant a missing password is a missing password but it also does not mean every Shark 6 on the road can be taken over on demand. Both statements are true at once, and reporting that drops either one is misleading.
Not a BYD-Only Problem
Connected-vehicle security is an industry-wide research field. Georgia Tech researchers working with Hyundai published vehicle cybersecurity research in 2024 identifying wireless vulnerabilities in vehicle computer systems.
That context is not an excuse for the specific finding here, and it should not be read as one. It simply means the underlying issue is what modern cars have become: computers with wheels, microphones, GPS, phone integration and permanent connectivity. Every one of those is a door that has to be locked.
BYD's Response
No response from BYD was included in the material available to us at the time of writing. Manufacturers typically address findings like this through software updates, so it is worth watching for an official statement rather than assuming silence.
What Owners of Any Connected Car Can Do
Install software updates when the manufacturer issues them. This is how these problems actually get fixed, and it is the step most owners skip.
Do not leave an unlocked phone in the car. This demonstration relied on exactly that.
Review connected-service and privacy permissions in the vehicle's app, and turn off what you do not use.
Know what remote functions your car supports and ask about the update policy before buying. A manufacturer that patches quickly is worth more than one with a longer feature list.
The Shark 6 in Pakistan
The Shark 6 is part of BYD's local lineup we compared it in our BYD Shark 6 in Pakistan feature, and have covered BYD's growing PHEV lineup in Pakistan, BYD Pakistan assembly plans and prices across BYD cars in Pakistan. Our latest BYD Pakistan update covers where the brand is heading locally.
Final Thoughts
The BYD Shark 6 hack was a controlled test on one vehicle over two weeks, and it reached comfort, convenience and privacy systems rather than braking or cameras. That distinction matters. What the test really illustrates is that a modern car is a connected computer, and buyers should start asking about software update policies the way they ask about warranties.
15+ years in business · In-house fitting in Multan · Nationwide delivery · Exact-fit products, never universal
Browse All Car Accessories →Questions about what fits your car? Contact us — 0321-1117525 · Open Mon–Sun, 9am–9pm.
