Once considered mere modes of transport, cars today are sophisticated networks of computers, sensors, and connectivity, transmitting data continuously to manufacturers, apps, and cloud services. But an investigative report by Haaretz reveals that some Israeli companies are taking this connectivity a step further: turning vehicles into intelligence-gathering tools for governments and private clients. The field, known in the intelligence world as CARINT—car intelligence—is rapidly emerging as a powerful and controversial arena of cyber surveillance.
At the heart of CARINT are tools capable of monitoring, analyzing, and even intervening in the digital systems of cars. Israeli firms such as Toka, Rayzone, and Ateros have developed technologies that can track a vehicle’s movements in real time, cross-reference its data with other intelligence sources, and, in some cases, remotely access audio and video inside the car. According to Haaretz, Toka, co-founded by former Prime Minister Ehud Barak and former Israel Defense Forces cyber chief Brig. Gen. (ret.) Yaron Rosen, once developed a system that could tap into a vehicle’s hands-free microphones and dashboard cameras. While Toka has reportedly stopped selling this offensive product, the underlying capabilities illustrate the risks inherent in connected cars.
Three years ago, Haaretz revealed Toka’s CARINT product, which fused camera data with vehicle information. Today, the firm has expanded its offerings to target specific car models from particular manufacturers. By exploiting security vulnerabilities in multimedia systems, the technology can identify a vehicle, track its route, and in theory eavesdrop on occupants. The Defense Ministry approved Toka’s products for demonstration to prospective clients and eventual sale, signaling official oversight of such sensitive tools. While Toka has stepped back from offensive sales, the underlying CARINT sector continues to evolve.
Rayzone, another Israeli cyber-intelligence firm, has also entered the market. Its CARINT tool, marketed under the subsidiary TA9—a nod to science fiction author Isaac Asimov—focuses primarily on vehicle tracking rather than intrusive eavesdropping. Using location data, SIM card communications, and roadside camera feeds, the system allows clients to map travel patterns and identify targets. Beyond vehicles, the technology is integrated into larger data fusion platforms, which combine multiple intelligence sources to produce comprehensive surveillance profiles. Haaretz reports that Rayzone’s tools can cross-reference commercial advertising data and publicly available information to identify individuals without needing to hack their devices directly.
The move toward CARINT reflects a broader global trend. Modern vehicles are essentially computers on wheels. Braking, airbag deployment, navigation, multimedia, and even engine starting can now be controlled remotely. SIM cards, GPS, and smartphone integration create a constant stream of data that intelligence agencies and hackers alike can exploit. In the United States, the FBI and NSA regularly request data from manufacturers, much as they do from tech giants like Apple and Google. Meanwhile, firms such as Palantir and Cellebrite aggregate this information into platforms capable of identifying and tracking individuals across vast data sets. Hackers have even demonstrated that cars can be fully hijacked—remotely steering or disabling them—though such operations remain highly complex.
Within Israel, the DefenseTech sector has also leveraged CARINT for national security. Following the October 7, 2023, attacks, the Israeli government worked with private firms and volunteers to track vehicles stolen by Hamas operatives, integrating these capabilities into the Israel Defense Forces’ operational framework. Elta, the cyber arm of Israel Aerospace Industries, is reportedly developing its own CARINT tools, though the company declined to comment. Meanwhile, the Israeli military has restricted Chinese-made electric vehicles from sensitive sites over concerns about embedded connectivity that could transmit data to foreign entities.
International intelligence conferences, such as the ISS World expos in Prague, Dubai, Atlanta, and Singapore, have become showcases for CARINT technology. Dubbed the “Souk of Spooks,” these events highlight AI-driven systems capable of processing millions of disparate data points from vehicles, cameras, and online sources. Israeli firms including Ateros, the AI-driven sister company of Netline, demonstrate how vehicle data can be fused with government databases to create highly detailed profiles of individuals. Sensors embedded in tires, which transmit unique pressure readings, can serve as identifiers, enabling surveillance even without traditional GPS tracking.
Experts note that vehicle intelligence represents a shift from invasive hacking toward sophisticated data fusion. While Toka explored offensive methods, other firms focus on integrating data streams from connected vehicles with broader intelligence frameworks. Each car presents unique technical challenges; systems vary by manufacturer and model, making uniform exploitation difficult. Tesla, Skoda, and other brands each have proprietary software that requires tailored approaches, limiting the scalability of hacks. Ethical hackers, cybersecurity researchers, and defense analysts have long warned that the digitization of cars introduces unprecedented privacy risks.
Despite these challenges, AI has amplified the effectiveness of CARINT. Automated systems can analyze travel patterns, license plates, and communications data in real time, often predicting a target’s movements before they happen. While overt vehicle hacking may no longer be the primary strategy, the combination of AI and open-source intelligence allows agencies and firms to surveil drivers using only publicly accessible information and commercially available tools. The result is a surveillance landscape where a car’s seemingly benign systems—hands-free microphones, tire sensors, multimedia interfaces—become vectors for monitoring.
The implications extend far beyond Israel. Globally, intelligence and law enforcement agencies are investing heavily in vehicle data. In China, regulations mandate the transmission of automotive data to authorities, while in the United States and Europe, companies increasingly integrate vehicle information into large-scale data analytics platforms. Cybersecurity experts warn that as cars become more connected, the risk of remote exploitation grows, potentially allowing physical as well as digital threats. Governments now demand not only location tracking but, in some cases, the ability to disable vehicles remotely.
Haaretz’s investigation paints a picture of a surveillance ecosystem in which our cars are no longer mere transport but active participants in intelligence operations. CARINT demonstrates the intersection of AI, cybersecurity, and real-world mobility, revealing a world in which private and public actors can monitor, analyze, and, potentially, manipulate vehicles and their occupants. As ethical and technical debates continue, the growing intelligence value of connected cars underscores the need for vigilance, regulation, and public awareness in an era where your car may know more about you than you realize.
