The researchers did not identify it, referring to it as “X”.
It sells two vehicle brands in Australia.
The number plate was the starting point, not a direct vehicle-control tool.
A registration lookup revealed the VIN, while weaknesses in the carmaker’s internal systems enabled access to the owner’s account and remote app commands.