Car Thieves Use Cell Phones and Bluetooth Speakers to Steal Cars Without a Key

According to a recent report by Motherboard, crafty car thieves are utilizing a range of small hacking tools that are often concealed inside old, non-smartphone devices or Bluetooth speakers to gain unauthorized access to and take off with vehicles. These criminals are using controller area network (CAN) injection attacks. This means that the thieves do not require access to the car's keys—physical or otherwise. But it sure will allow them to drive off with your wheels.

In order to execute this attack, the thieves merely remove the car's headlights and connect the hacking tool, aka the phone or Bluetooth device, using two cables. Once connected, the phone can transmit bogus messages to the vehicle that appear as if they come from its authorized wireless keys. This allows the vehicle to be unlocked and started so the thief can be on his or her way in 15 seconds or less, in some cases. Oh what fine and simpler times they were when we had to have a metal key to start a car!

Making it particularly easy for the thieves, the hacking tools are reportedly being sold online and in Telegram channels for prices ranging from $2,700 to $19,600. While it may seem pricey, it’s likely considered a small investment for luxury car thieves, who can net far more from the sale of the stolen vehicle or from the sum of the price of the parts.

The issue was initially reported by security researchers at Canis Labs after a vehicle was stolen using this technique. The tools are advertised as being compatible with Toyota, BMW, Maserati, and Lexus vehicles. Likely, these aren’t the only ones.

How can these gadgets be found so easily for sale, legally? Well, they are often advertised as “emergency start” devices somewhat intended to be used for locksmiths. However, most legitimate businesses would not need to have the tool hidden inside another device, especially an older phone, such as those Nokia phones from a couple of decades ago.

There isn’t much the owners of the cars can do at the moment other than park vehicles in secure locations and perhaps a steering wheel club would be a deterrent for some. But knowing about this is a good start for which you don’t need a key either.