High-tech thieves expose Toyota's vulnerabilities, steal cars in minutes using this simple hack

Toyota has been known as one of the most dependable car brands for decades. Because Toyotas are seen as reliable, they are very popular in both new and used car markets. That popularity has made some Toyota and Lexus models a target for thieves.

Thieves in Canada, Australia and the UK are using a simple hack to steal these cars quickly, as per the report by Auto blog. The thieves use a device called a CAN Invader that can break the car’s security in minutes. The CAN Invader can bypass the immobilizer, unlock doors and start the engine without anyone knowing. These attacks can be used against most modern cars, not only Toyotas, but Toyotas are being hit a lot.

CANbus hack

Modern cars connect many electronics using a system called CANbus. CANbus links things like the stereo, seat controls, lights and the car’s ECU (engine control unit). To use the hack, thieves first get physical access to the car’s electronics wiring. Thieves gain access by plugging the hacking device into headlight wiring after peeling back the fender liner. Some thieves drill holes in fender liners to reach wiring. ALSO READ: Missed your $400 relief check? Follow this 2-step process to claim it fast

Ways to stop Toyota CANbus thefts

On some Lexus models, thieves plug into the CANbus through the taillights. Once connected, thieves send CAN injections — lines of malicious code — into the car’s ECU. Those CAN injections trick the ECU into thinking a valid key is present. That trick then unlocks doors, disables the immobilizer and lets the engine start without triggering alarms. Traditional protections like storing keys in Faraday cages do not stop this hack because the attack is physical to the car, not a relay from the key.

The first defence is to block physical access to the wiring so thieves cannot plug in devices. Toyota and Lexus are offering wheel well protection in some markets to block physical access to wiring. One way to stop this is a CANbus gateway blocker. It is a technical device and costs more than $500. Cheaper, low-tech ways that help are steering wheel locks and wheel locks. They make it harder for thieves to steal the car.

FAQs

Q1. How are thieves stealing Toyota and Lexus cars so fast?

Thieves use a device called a CAN Invader to plug into the car’s wiring and trick the system into thinking a key is present, allowing them to start the engine in minutes.

Q2. How can I protect my Toyota or Lexus from CANbus hacks?

You can install wheel well protection or a CANbus gateway blocker, and also use simple tools like steering wheel locks to stop thieves.