Apparent New Theft Tactic

[mcd_ovrlnd]

Read about this today.

Sponsored

 

[horbit]

Canbus injection attacks are not new. If you want to protect your car, get an aftermarket immobilizer.

 

[Nodak]

that old tactic and not just for toyota. i think they started doing that on honda's first a while back.

 

[Lamuncha]

Not sure why I have to go to Inst to read a 4runner6g post. I'll pick it up elsewhere.

 

[127.0.0.1]

old news

 

[jrdees916]

What I have read to stop this is just get a faraday box if you’re worried. It blocks the signal from your key fob.

 

[horbit]

What I have read to stop this is just get a faraday box if you’re worried. It blocks the signal from your key fob.

Not correct. This attack sends canbus commands into the system and the thief can generate a new key (and delete yours) with the attached device. Looks like this vehicle has canbus wires easily accessible from outside the cabin via the head\tail light harness. Other attacks I have seen recently are drill a hole in the side of the door to access the canbus wires.

There is no "firewall" or encrypted communications on many vehicles, no canbus protection at all, the only way to prevent this type of attack is to lock down the key module (preventing new keys from being created) or with an aftermarket immobilizer.

The only thing a faraday pouch or putting your fob into sleep mode does is mitigate key cloning or relay attacks. Have you seen the attack where they stand outside your front door with a big antennae?

This article is about physical attacks on the vehicle canbus network.

 

[jcash25]

Read about this today.

This has been a issue since the start of using just a fob to start the car.
If you are that concerned with your Toyota being stolen by this method put your keys in a faraday bag or box when you get home a quick google will show you plenty to choose from.

 

[horbit]

This has been a issue since the start of using just a fob to start the car.
If you are that concerned with your Toyota being stolen by this method put your keys in a faraday bag or box when you get home a quick google will show you plenty to choose from.

Wrong, read the article or my post above.

 

[jcash25]

Not correct. This attack sends canbus commands into the system and the thief can generate a new key (and delete yours) with the attached device. Looks like this vehicle has canbus wires easily accessible from outside the cabin via the head\tail light harness. Other attacks I have seen recently are drill a hole in the side of the door to access the canbus wires.

There is no "firewall" or encrypted communications on many vehicles, no canbus protection at all, the only way to prevent this type of attack is to lock down the key module (preventing new keys from being created) or with an aftermarket immobilizer.

The only thing a faraday pouch or putting your fob into sleep mode does is mitigate key cloning or relay attacks. Have you seen the attack where they stand outside your front door with a big antennae?

This article is about physical attacks on the vehicle canbus network.

Thats a lot of trouble to get to the wires and then steal the car. So they will have to remove a tailight then splice into said wiring then put the taillight back and drive off with it. Yeah ok im gonna take my chances with mine

 

[horbit]

Thats a lot of trouble to get to the wires and then steal the car. So they will have to remove a tailight then splice into said wiring then put the taillight back and drive off with it. Yeah ok im gonna take my chances with mine

Be honest with yourself, they are going to break the car quickly and rip things out like animals so they can part it out later. They need access to just two wires. Nobody cares about vehicle security until they walk outside and the car is gone. You put protection (password, pin, faceid) on your computers and phones. Why not a $60k+ vehicle?

 

[kobyneal]

My two cents on this thread coming from someone who had their LC250 taken with this exact method.
They can take your car in under 4 mins (mine taken from outside a friends house where it was parked for less than an hour with us inside the home). The police I spoke to said even some vehicles taken recently had the after market immobilizer and were still stolen and not recovered. It slows them down but doesn’t stop them. Have been told by both those same police and insurance the best security is a physical device like The Club. Agree or disagree that’s fine, just my experience and what I was told. Toyota Australia now also selling a Club type steering wheel lock for this exact reason.

 

[kekecarioca]

My two cents on this thread coming from someone who had their LC250 taken with this exact method.
They can take your car in under 4 mins (mine taken from outside a friends house where it was parked for less than an hour with us inside the home). The police I spoke to said even some vehicles taken recently had the after market immobilizer and were still stolen and not recovered. It slows them down but doesn’t stop them. Have been told by both those same police and insurance the best security is a physical device like The Club. Agree or disagree that’s fine, just my experience and what I was told. Toyota Australia now also selling a Club type steering wheel lock for this exact reason.

Sad to hear that, and crazy that we have gone full circle on the steering wheel club as best device.

 

[horbit]

They can just cut the steering wheel off in the sections the club is attached to, takes 20 seconds. Properly installed quality immobilizers like the Ghost or IGLA prevent the engine from turning on at all unless there is authentication.

 

[kobyneal]

Again. Not disagreeing. But being told the immobilizers are now being worked around as well - after paying $1200 for installation - not really a comforting confirmation

Sponsored