Car Theft Goes High-Tech

High-Tech Car Theft: A New Era

Car thieves have evolved, using the sophistication of modern technology to their advantage. In 2025, keyless entry systems, which once epitomized convenience, have become an attractive lure for criminals. With inexpensive relay gadgets and some technical know-how, these tech-savvy thieves can effortlessly capture and boost the signal from a car’s key fob—even if it sits snugly within one’s home—allowing them to drive away in mere seconds.

The Mechanics of Theft

• Relay Attacks: Criminals deploy radio amplifiers to deceive the car into believing the key is within proximity, even if it’s tucked away inside the house.
• Replay/Jamming: Thieves intercept the unlock signal, record it, and deploy it at a later time to access the car.
• Cryptanalytic Attacks: Hackers clone car keys by capturing and analyzing the digital interaction between the car and its fob.

Vulnerable Cars

Within the U.S., older models of Hyundais and Kias have been long-time targets due to their fragile immobilizer systems. However, even premium brands like Tesla have demonstrated susceptibilities. As the automotive landscape changes, keyless entry vulnerabilities remain a significant concern. Here’s a glimpse of the top 10 most stolen vehicles from keyless entry attacks in the U.S. for 2024.

Tesla’s Keyless Challenges

• Tesla’s Model 3 and Model Y are notably susceptible to Bluetooth Low Energy (BLE) relay attacks. Such vulnerabilities could see these vehicles driven away in seconds unless advanced security measures, such as PIN-to-drive, are activated.
• Although they don’t top the most-stolen list, Tesla’s BLE-relay vulnerability highlights concerns about digital convenience, similar to challenges faced by other BLE-reliant brands.
• The optional PIN-to-drive feature in Tesla vehicles can be a deterrent to drive-away thefts but necessitates manual activation by the owner.

Key Trends

• Older Hyundai and Kia models (pre-2022/2023): Possess glaring vulnerabilities due to the absence of immobilizers, making them easy targets for both relay and physical assaults.
• American Pickup Trucks (Chevrolet Silverado, Ford F-150): These are sought after for part thefts. Newer models have vulnerabilities inherent in keyless entry systems.
• Other Keyless Models (Toyota Camry, Dodge Charger, Honda Accord/Civic): While equipped with push-button start systems, these models are still targets for relay attacks, despite typically having immobilizers in place.
• Tesla and other BLE/NFC-based models: Prone to advanced relay assaults, especially if additional security measures are absent.

Manufacturer Shortcomings

Despite repeated warnings, many automakers appear to cling to outdated cryptographic solutions and unidirectional signaling. The prevalent belief in “security by obscurity” hopes hackers won’t exploit existing vulnerabilities. This outdated approach has led to a surge in vehicle thefts, driving a brisk market for aftermarket Faraday pouches, which block radio signals. It’s a peculiar circumstance when a high-end vehicle requires a cheap aftermarket solution for protection.

Potential Solutions

Some forward-thinking researchers advocate for innovative solutions such as adaptive frequency-hopping, two-way authentication, and dynamic cryptographic keys. While these updates could significantly complicate life for car thieves, the widespread adoption by automakers remains elusive. Without these advances becoming standardized, the digital handshake between cars and their keys remains rife with potential security risks.

Balancing Convenience and Security

If the car welcomes its owner with a simple wave or ping, it risks exposure to high-tech theft. Until the auto industry catches up, utilizing any and all available security features is wise. Accessories like Faraday pouches or a good old-fashioned steering lock offer additional protection. Maximizing convenience shouldn’t equate to giving thieves easy access.