BYD confirms hacking claim: Fix developed for 2026 BYD Shark 6 following extensive investigation into the popular ute

News Journalist
Comment

Key takeaways:

  • BYD acknowledged the risk of unauthorised external access to the Shark 6 ute’s developer-only software and key functions
  • The brand will release an over-the-air software update to rectify the glitch used in an ABC Four Corner report
  • BYD is still investigating if the concerns impact other vehicles in its Australian line-up

BYD has revealed key details following vehicle hacking concerns emerging in an ABC Four Corners investigation.

BYD acknowledged someone can gain unauthorised access to the Shark 6 ute’s developer-only software and also control functions like headlights and windscreen wipers.

The brand said this access can only be approved by a prompt on the ute’s central touchscreen and tapping into vehicle wiring.

It is still investigating whether these issues affect other models in its line-up.

BYD will issue a future over-the-air update to fix software issues and continue to assess what other changes are necessary.

The 2026 BYD Shark 6’s susceptibility to unapproved access

BYD acknowledged a software bug can enable unapproved apps to bypass internal protections and gain access to the Android Debug Bridge (ADB) used for software developers to work on the car. 

BYD said someone must manually approve the access via a prompt on the car’s central touchscreen for internal protection to be bypassed.

The brand said cybersecurity expert Dan Hreszczuk in the Four Corners report exploited a software defect to enable the ADB and then install a third-party app.

Subscribe to our newsletter

Stay up to date with the CarsGuide weekly newsletter

By subscribing you agree to our Privacy Policy.

BYD has announced it will remove the software pathway that could approve access through the Shark 6's central touchscreen.

It will roll out this fix in a future over-the-air (OTA) update, following a validation process.

External control of headlights and windscreen wipers on 2026 BYD Shark 6 requires physical access

BYD said someone must tap into vehicle wiring responsible for the Control Area Network (CAN) bus to gain external access to the Shark 6’s headlights and windscreen wipers.

As a result, BYD will implement new security measures, including device authentication and physical isolation to increase cybersecurity safeguards.

It will conduct a risk assessment to evaluate the necessity of additional measures to prevent unapproved access to the vehicle's CAN.

2026 BYD Shark 6 alleged hacking controversy

In a September 2026 ABC Four Corners report, Hreszczuk said he gained remote access to various functions on the BYD Shark 6, including operating the wipers and headlights.

Hreszczuk said by unpicking the software programs controlling different functions on the ute, he could blast music over the speakers and remotely switch the car’s lights on and off.

“It’s a little bit scary how open … the BYD Shark is to a hacker,” Hreszczuk told the ABC.

Tim Gibson

News Journalist

Tim covers motoring news at CarsGuide as a News Journalist, having previously reported on football for Football NSW and Football Australia, and interned at ABC Illawarra.

About Tim

Comments