The attackers expect the frequency drives to be running between 807 Hz and 1210 Hz.

The data in the frames are instructions for the frequency converter drives. For example one of the frames contains records that change the maximum frequency (the speed at which the motor will operate). The frequency converter drives consist of parameters, which can be remotely configured via Profibus. One can write new values to these parameters changing the behavior of the device. The values written to the devices can be found in Appendix C.
Of note, for sequence A, the maximum frequency is set to 1410 Hz in sequence 1a, then set to 2 Hz in sequence 2a, and then set to 1064 Hz in sequence 2b. Thus, the speed of the motor is changed from 1410Hz to 2Hz to 1064Hz and then over again. Recall the normal operating frequency at this time is supposed to be between 807 Hz and 1210 Hz.

And your nice maraging steel or carbon fiber rotor is now a pile of shrapnel or string.


Kinda like your transmission if you shift into 1st at highway speed. Hmm, can Onstar upload transmission-control firmware over the wire (yet)?