Notices
Car Chat General discussion about Lexus, other auto manufacturers and automotive news.
Sponsored by:
Sponsored by: Innova

stealing a lexus rx in under 2 minutes

Thread Tools
 
Search this Thread
 
Old Jul 2, 2023 | 07:48 PM
  #1  
bitkahuna's Avatar
bitkahuna
Thread Starter
CL Community Team
iTrader: (20)
 
Joined: Feb 2001
Posts: 80,776
Likes: 3,985
Default stealing a lexus rx in under 2 minutes

yikes. video is shocking.

In the video (at the link) below, you will see how the thieves spend some time doing something around the front driver's side wheel arch. That's how they access the headlight unit without much hassle. Because the headlight has a direct line of communication with the vehicle's electronic control unit (ECU), the people involved in this theft can reprogram it. They flush their own code, bypass the alarm system, and gain access to the vehicle. From there on, it's a matter of having a good driver available to take the SUV off the street before the Police are notified and able to look around.

This incident took place in Toronto, Canada. This theft method is relatively new, but we know it's named the "CAN injection." It is no "Kia Boyz" technique. A wireless speaker-like device sold on the dark web can be turned into any key fob after bypassing the ECU. Similar reports have also been made in the US, but this is the first time we get a good look at how fast a car can be stolen by just tricking the ECU into thinking the rightful owner is there to drive.


https://www.autoevolution.com/news/w...y-217397.html#
Reply
Old Jul 2, 2023 | 08:16 PM
  #2  
mmarshall's Avatar
mmarshall
Lexus Fanatic
Community Builder
Community Influencer
Liked
Loved
 
Joined: Oct 2003
Posts: 94,410
Likes: 249
From: Virginia/D.C. suburbs
Default

Darn, In broad daylight, in public, with witnesses. I agree with bit that it is shocking.....assuming that the video itself was not staged, which some videos like this sometimes are.

And, if true, it will also answer some of those persons here in Car Chat (I won't use any names) who like to constantly pan Hyundai and Kia products for THEIR easy-access to car thieves.
Reply
Old Jul 3, 2023 | 06:18 AM
  #3  
lexusnyca's Avatar
lexusnyca
Instructor
Liked
Loved
Community Favorite
 
Joined: Aug 2022
Posts: 1,246
Likes: 459
From: NY
Default

I wonder if this is fixed in the 5th generation RX.

But yes, auto insurance rates are skyrocketing. This is one reason. All these electronics in cars, in key fobs, car apps - that was supposed to make them harder to steal, has no actually made them easier to steal. I may have to get a steering wheel lock now.
Reply
Old Jul 3, 2023 | 06:18 AM
  #4  
Blaze876's Avatar
Blaze876
Instructor
10 Year Member
Photogenic
Liked
Loved
iTrader: (1)
 
Joined: Apr 2015
Posts: 1,011
Likes: 183
From: miami
Default

Originally Posted by mmarshall
Darn, In broad daylight, in public, with witnesses. I agree with bit that it is shocking.....assuming that the video itself was not staged, which some videos like this sometimes are.

And, if true, it will also answer some of those persons here in Car Chat (I won't use any names) who like to constantly pan Hyundai and Kia products for THEIR easy-access to car thieves.
This is so much different than the Hyundai and Kia situation though. They are using a sophisticated device that is probably not easily accessible and seems it could probably work on most cars. With Hyundai and Kia situation any Joe have access to steal your car in a minute or two.

I've never been one to pan Hyundai and Kia products either, I actually like a lot of their products. But trying to make both situations seem the same is disingenuous.
Reply
Old Jul 3, 2023 | 06:54 AM
  #5  
Margate330's Avatar
Margate330
Lexus Champion
5 Year Member
Liked
Loved
Community Favorite
 
Joined: Apr 2019
Posts: 11,226
Likes: 1,589
From: FL
Default

Originally Posted by lexusnyca
I wonder if this is fixed in the 5th generation RX.

But yes, auto insurance rates are skyrocketing. This is one reason. All these electronics in cars, in key fobs, car apps - that was supposed to make them harder to steal, has no actually made them easier to steal. I may have to get a steering wheel lock now.
That's because it only takes one person to figure it out and post it online and then all the "script kiddies" can download it on a $50 microcontroller board running a CAN shield, and I'm guessing that's how they are doing it or something similar.

It's a disgrace to the Computer Science industry for people to do this and whoever wrote the software was not a beginner.

I hate to see this, disgusting and a shame they didn't use their talent for good.
Reply
Old Jul 3, 2023 | 07:34 AM
  #6  
mmarshall's Avatar
mmarshall
Lexus Fanatic
Community Builder
Community Influencer
Liked
Loved
 
Joined: Oct 2003
Posts: 94,410
Likes: 249
From: Virginia/D.C. suburbs
Default

Originally Posted by Blaze876
This is so much different than the Hyundai and Kia situation though. They are using a sophisticated device that is probably not easily accessible and seems it could probably work on most cars. With Hyundai and Kia situation any Joe have access to steal your car in a minute or two.

I've never been one to pan Hyundai and Kia products either, I actually like a lot of their products. But trying to make both situations seem the same is disingenuous.

I agree that the two scenarios are not exactly the same, but the point is that you never know if the car thief (or potential car-thief) is going to be a sophisticated professional or a first-time rookie without much knowledge. The vehicle is either stolen or it's not.
Reply
Old Jul 3, 2023 | 08:03 AM
  #7  
Motorola's Avatar
Motorola
Lexus Test Driver
5 Year Member
Photogenic
Photoriffic
Liked
 
Joined: Mar 2020
Posts: 5,482
Likes: 89
From: N/A
Default

Originally Posted by Blaze876
This is so much different than the Hyundai and Kia situation though. They are using a sophisticated device that is probably not easily accessible and seems it could probably work on most cars. With Hyundai and Kia situation any Joe have access to steal your car in a minute or two.

I've never been one to pan Hyundai and Kia products either, I actually like a lot of their products. But trying to make both situations seem the same is disingenuous.
The primary difference between this and the Hyundai situaton is that this didn't blow up on Tik Tok (not yet at least) to encourage kids to commit crime for social clout. Anyone who actually wanted to accomplish this on a modern vehicle could easily do so, as Margate already pointed out.
Reply
Old Jul 3, 2023 | 08:39 AM
  #8  
1111GS's Avatar
1111GS
CL Community Team
10 Year Member
Liked
Loved
Community Favorite
 
Joined: Oct 2011
Posts: 3,422
Likes: 200
From: US
Default

Wow maybe we should buy one of those steering wheel locks to be sure. I just looked them up. I'm surprised they are still available.
Originally Posted by Margate330
That's because it only takes one person to figure it out and post it online and then all the "script kiddies" can download it on a $50 microcontroller board running a CAN shield, and I'm guessing that's how they are doing it or something similar.
It's a disgrace to the Computer Science industry for people to do this and whoever wrote the software was not a beginner.
I hate to see this, disgusting and a shame they didn't use their talent for good.
What about viruses and hackers?
Reply
Old Jul 3, 2023 | 08:41 AM
  #9  
Margate330's Avatar
Margate330
Lexus Champion
5 Year Member
Liked
Loved
Community Favorite
 
Joined: Apr 2019
Posts: 11,226
Likes: 1,589
From: FL
Default

Without other safeguards in place, I can see this happening to other car brands too, just a matter of time.



Reply
Old Jul 3, 2023 | 08:45 AM
  #10  
Margate330's Avatar
Margate330
Lexus Champion
5 Year Member
Liked
Loved
Community Favorite
 
Joined: Apr 2019
Posts: 11,226
Likes: 1,589
From: FL
Default

Originally Posted by 1111GS
Wow maybe we should buy one of those steering wheel locks to be sure. I just looked them up. I'm surprised they are still available.

What about viruses and hackers?
If it's a model that has an exploit that is being used, maybe an aftermarket immobilizer, I don't know.

Hackers, yes, anything that is "online" can in theory be hacked as ya'll know.

Viruses, I'm not an expert on that so hopefully others can chime in but if running a well known operating system kernel, oh yeah I can see it. lol
Reply
Old Jul 3, 2023 | 10:58 AM
  #11  
Striker223's Avatar
Striker223
Lexus Champion
5 Year Member
Liked
Loved
Community Favorite
 
Joined: Oct 2019
Posts: 18,190
Likes: 1,763
From: Ohio
Default

Originally Posted by Blaze876
This is so much different than the Hyundai and Kia situation though. They are using a sophisticated device that is probably not easily accessible and seems it could probably work on most cars. With Hyundai and Kia situation any Joe have access to steal your car in a minute or two.

I've never been one to pan Hyundai and Kia products either, I actually like a lot of their products. But trying to make both situations seem the same is disingenuous.
It's not expensive or difficult to get, it's actually easier than most people think and it's entirely due to the push to start only systems and CAN integration of all computers.

This is made vastly worse by internet connection integration for always on remote app based control. If you have the app code you can convince the car you have access rights. That's one of many reasons I disable my cars antennas and gps etc....

Still if someone wants your car they will take it, it's impossible to dodge them forever and unless you leave someone in the car when you go out they can/will just tow it away.

Last edited by Striker223; Jul 3, 2023 at 11:01 AM.
Reply
Old Jul 3, 2023 | 11:50 AM
  #12  
703's Avatar
703
Lead Lap
20 Year Member
Community Builder
Liked
Loved
 
Joined: Aug 2001
Posts: 4,533
Likes: 935
Default

Those are old news from last year which have been posted before.

1 in 16 Lexus RX gets stolen in Canada and is shipped to Africa mostly.

Most are inside jobs. Essentially the VIN is known before hand and with access to dealer software the master key code for the specific car is revealed. All they are doing is pairing a new “virtual” key.

Same process when you lose all your car keys and take it to the dealer.

Toyota/Lexus dropped the ball in protecting that internal process.

Is not the technology that failed. Is the Process.

Here’s one. Those guys took a photo of the VIN prior: https://streamable.com/bjhl4o?src=player-page-share

Last edited by 703; Jul 3, 2023 at 12:21 PM.
Reply
Old Jul 3, 2023 | 11:58 AM
  #13  
Margate330's Avatar
Margate330
Lexus Champion
5 Year Member
Liked
Loved
Community Favorite
 
Joined: Apr 2019
Posts: 11,226
Likes: 1,589
From: FL
Default

Originally Posted by Striker223
It's not expensive or difficult to get, it's actually easier than most people think and it's entirely due to the push to start only systems and CAN integration of all computers..
So true.
The physical key on the older models adds an extra layer of protection vs a software controlled push start button.

No physical metal key?
Now they're screwed and steering wheel is locked. haha

Yeah, they can break the ignition lock but that's extra work and more time aka more risk.
These thieves are the lowest of lifeforms. IMO

I'm installing a Palm Scanner on my car wired to a fuel cut off. lolol
Reply
Old Jul 4, 2023 | 09:32 AM
  #14  
spwolf's Avatar
spwolf
Lexus Fanatic
20 Year Member
Liked
Loved
Community Favorite
 
Joined: Jan 2005
Posts: 20,237
Likes: 274
Default

Originally Posted by Margate330
Without other safeguards in place, I can see this happening to other car brands too, just a matter of time.
it is happening... a lot of them increased their security in past 2 years. We had large strings of robberies in BMW models with simple keyfob cloning from fairly far away. They fixed it in newer models.

The fact that BMW also has this problem does not help Lexus drivers in Canada though.
Reply
Old Jul 4, 2023 | 10:44 AM
  #15  
AMIRZA786's Avatar
AMIRZA786
Lexus Champion
5 Year Member
Photogenic
Liked
Loved
 
Joined: Oct 2019
Posts: 19,674
Likes: 3,757
From: California
Default

Originally Posted by Margate330
So true.
The physical key on the older models adds an extra layer of protection vs a software controlled push start button.

No physical metal key?
Now they're screwed and steering wheel is locked. haha

Yeah, they can break the ignition lock but that's extra work and more time aka more risk.
These thieves are the lowest of lifeforms. IMO

I'm installing a Palm Scanner on my car wired to a fuel cut off. lolol
​​​​​​Cars with ignition and keys are easier to steal. Long story short, my brother's 2003 Corolla was sitting at a mechanic shop where the owner disappeared. He brought in a locksmith who rekeyed the ignition in less than two minutes. Yes he was licensed, but his tools and skills are easily obtainable.

As cars continue to adapt keyless technology, there is always going to be people that exploit them. All you need is the proper tools and some know how. The good news is if someone steals any of our cars, I can track all of them in realtime (except my Sienna)
Reply



All times are GMT -7. The time now is 09:35 AM.