CYBERSECURITYTRACKER
Permanent story citation

Risky Bulletin: Hackers lock out and extort Li Auto EV owners in Russia

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12292

As cited

Copy frozen at (site build).

breaches incidents

Risky Bulletin: Hackers lock out and extort Li Auto EV owners in Russia

Attackers are compromising master user accounts of Li Auto electric vehicles in Russia, locking owners out and demanding ransom to restore access. At least 20 confirmed cases have been reported by a car club co-founder, with the actual number likely higher. Most victims used Chinese eSIMs from eSender or importers to set up their master accounts.

Why it matters: Li Auto EV owners in Russia face account takeover and vehicle lockout attacks; practitioners should review whether their organizations use these vehicles or similar connected car systems, and assess account security and eSIM provider vetting practices.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary