Have You Heard About The Newest Way Toyotas Are Being Stolen?
Toyota’s reputation for reliability and durability has long made its vehicles some of the most sought-after in both new and used markets. Unfortunately, that same desirability has turned into a liability as thieves are exploiting a vulnerability in the brand’s electronics that allows them to steal vehicles in just a few minutes—without ever touching the key.
The tool at the center of the problem is called a CAN Invader, a small electronic device that targets a vehicle’s Controller Area Network, or CAN bus.
The CAN is an internal communication system that connects nearly every electronic module used in modern cars and allows them to talk to each other. The CAN Invader takes advantage of that access, using malicious digital signals known as CAN injections to trick the vehicle’s computer into believing a legitimate key is present. Once bypassed, the attacker can unlock doors, disable the immobilizer, and start the engine—without triggering an alarm.
In the case of Toyota and Lexus models, thieves typically gain access through the wiring behind the front or rear lights. By peeling back a fender liner or drilling into the wheel arch, they can reach connectors and plug in their hacking device—once the connection is made, the process of unlocking and starting the car takes less than 120 seconds.
And no, keeping your key in a Faraday pouch doesn't help defend against this process in case you're wondering. Some aftermarket providers have begun offering headlight protection kits to make physical access to the connectors more difficult.
Some owners are turning to more old-fashioned methods, such as kill switches, steering wheel locks, or wheel clamps, to deter thieves. Until a software-based solution is implemented, owners of newer Toyota and Lexus models are being told to take extra precautions—especially if they park outside.
Become an AutoGuide insider. Get the latest from the automotive world first by subscribing to our newsletter here.
More by AutoGuide.com News Staff
Comments
Join the conversation