Security researcher Samy Kamkar has found a way of launching a man-in-the-middle attack that can steal OnStar account information. After intercepting communications between a smartphone running the OnStar RemoteLink app and OnStar servers, Kamkar is able to locate, unlock and remote start vehicles. The hacker can also access the users name, email, home address, and last four digits of a credit card and expiration date. Kamkar will be demonstrating the attack, and discussing other aspects of car hacking, at DEF CON hacker conference.”]
Source: https://grahamcluley.com/hack-track-unlock-car-onstar/