Photo: Lexus / autoevolution edit
It's getting harder and harder to protect your vehicle from being stolen. Not even parking in front of a working surveillance system will deter nefarious actors. Here's how a Lexus RX got stolen in under two minutes.
Vehicles today are more technologically advanced than ever before. Even some headlights, like the matrix LED ones, come with their own dedicated computers. These units must balance thousands of mirrors and interpret information from the cameras, so they need these computing units to make decisions as fast as possible not to blind oncoming traffic participants.
But as proven during numerous hackathon events where programmers discovered all sorts of vulnerabilities, almost no technology is safe from being cracked by those who are savvy enough. Besides, the internet is filled with learning resources that can train nearly anyone into an expert in a relatively short period.
Over the pond, thieves popularized stealing cars by compromising the keyless access system. Essentially, they copied or amplified the key fob's signal, got behind the wheel, turned the vehicle on, and drove away in seconds. Car owners were advised to store their key fob in the fridge or the microwave, so they would at least attempt to block such attempts.
But thieves can get creative, and some are really smart. They connect to the car's computer when they cannot copy or amplify the RFID tag. A recent video shows that a Lexus RX can be stolen in under two minutes, and it's a three-person job. One drives the vehicle to identify potential targets, another compromises the security system of the car about to be stolen, and one more gets behind the wheel of the freshly unlocked unit.
In the video below, you will see how the thieves spend some time doing something around the front driver's side wheel arch. That's how they access the headlight unit without much hassle. Because the headlight has a direct line of communication with the vehicle's electronic control unit (ECU), the people involved in this theft can reprogram it. They flush their own code, bypass the alarm system, and gain access to the vehicle. From there on, it's a matter of having a good driver available to take the SUV off the street before the Police are notified and able to look around.
This incident took place in Toronto, Canada. This theft method is relatively new, but we know it's named the "CAN injection." It is no "Kia Boyz" technique. A wireless speaker-like device sold on the dark web can be turned into any key fob after bypassing the ECU. Similar reports have also been made in the US, but this is the first time we get a good look at how fast a car can be stolen by just tricking the ECU into thinking the rightful owner is there to drive.
If you care about your vehicle or need it daily, then make sure to have a hard-to-find GPS tracking system installed. Even an AirTag would help the Police find your stolen vehicle. People are getting creative about breaking the law and making a quick buck.
Having a surveillance system like Tesla's Sentry Mode or Rivian's Gear Guard can also be helpful in detecting thefts and identifying those trying the CAN injection method.
But as proven during numerous hackathon events where programmers discovered all sorts of vulnerabilities, almost no technology is safe from being cracked by those who are savvy enough. Besides, the internet is filled with learning resources that can train nearly anyone into an expert in a relatively short period.
Over the pond, thieves popularized stealing cars by compromising the keyless access system. Essentially, they copied or amplified the key fob's signal, got behind the wheel, turned the vehicle on, and drove away in seconds. Car owners were advised to store their key fob in the fridge or the microwave, so they would at least attempt to block such attempts.
But thieves can get creative, and some are really smart. They connect to the car's computer when they cannot copy or amplify the RFID tag. A recent video shows that a Lexus RX can be stolen in under two minutes, and it's a three-person job. One drives the vehicle to identify potential targets, another compromises the security system of the car about to be stolen, and one more gets behind the wheel of the freshly unlocked unit.
In the video below, you will see how the thieves spend some time doing something around the front driver's side wheel arch. That's how they access the headlight unit without much hassle. Because the headlight has a direct line of communication with the vehicle's electronic control unit (ECU), the people involved in this theft can reprogram it. They flush their own code, bypass the alarm system, and gain access to the vehicle. From there on, it's a matter of having a good driver available to take the SUV off the street before the Police are notified and able to look around.
This incident took place in Toronto, Canada. This theft method is relatively new, but we know it's named the "CAN injection." It is no "Kia Boyz" technique. A wireless speaker-like device sold on the dark web can be turned into any key fob after bypassing the ECU. Similar reports have also been made in the US, but this is the first time we get a good look at how fast a car can be stolen by just tricking the ECU into thinking the rightful owner is there to drive.
If you care about your vehicle or need it daily, then make sure to have a hard-to-find GPS tracking system installed. Even an AirTag would help the Police find your stolen vehicle. People are getting creative about breaking the law and making a quick buck.
Having a surveillance system like Tesla's Sentry Mode or Rivian's Gear Guard can also be helpful in detecting thefts and identifying those trying the CAN injection method.
Google News