Millions of California-Bought Cars Can Be Hijacked via Bluetooth
Serious flaw in vehicle security systems allows thieves to unlock doors remotely.
1Risk of Vehicle Hijacking via Bluetooth
Researchers at the University of California San Diego revealed that at least 2.2 million vehicles with KARR and SWDS security systems can be hijacked via Bluetooth. This vulnerability poses serious risks, including unlocking doors, honking the horn, and even preventing the vehicle from starting.
2The Same Security Key Issue
According to the research, KARR and SWDS devices rely on the same security key. This means anyone with a Bluetooth connection can take control of an affected vehicle by getting close to it. This creates a new method for vehicle theft.
3Systems Installed by Dealers
KARR and SWDS devices are installed by car dealerships and are often sold as a paid upgrade. These systems offer functions like vehicle tracking and theft prevention. However, even users with inactive contracts are at risk.
4Removing Devices is Difficult
Researchers note that removing these devices is not easy. It requires opening the vehicle’s dashboard and cutting and reconnecting wires connected to the car’s computer system. This indicates that many vehicles are on the road with these devices installed.
5Widespread Affected Vehicles
The most affected vehicles were purchased in Southern California over the past nine years from Honda, Toyota, Mazda, Ford, and Jeep dealerships. However, due to the secondary market, these vehicles are now widespread across the US and even as far as Japan.
6Firmware Update Released
KARR Security has released a firmware update for affected devices. This update can be installed by both active users and those with inactive systems. The company did not clarify whether it has notified customers about the need to update.