Keyless Theft Techniques

In the UK, keyless vehicle theft, often known as “relay theft,” is a major concern, especially affecting cars with keyless entry systems. This type of theft, alongside related methods like jamming attacks and signal amplification, is said to have become prevalent as car thieves exploit vulnerabilities in electronic key fobs. Manufacturers are being blamed. But:

  • How quickly we forget vehicle manufactures were once the hero of the piece.
  • Has this modern methodology really made the difference being claimed?
  • Is this just anther excuse for law enforcement being able to do nothing, or claiming this to be the case?
  • Is ‘keyless’ the new ‘fishing rod’ explanation enabling less attention to be be paid, marking them down as relatively insignificant?

Identified Techniques

Relay Theft:

    • Process: Relay theft is the most common method. Thieves use two devices that communicate wirelessly. One device is placed near the key fob (often inside the owner’s home), capturing its signal and relaying it to a second device near the vehicle. This second device mimics the key fob, “unlocking” the vehicle and allowing the thief to start it and drive away.
    • Countermeasures: Law enforcement and manufacturers are working to enhance signal encryption and reduce key signal range. Additionally, some manufacturers are updating fobs to enter “sleep mode” when inactive, preventing relay signals.

    Jamming:

      • Process: In jamming attacks, thieves prevent the locking command from reaching the vehicle by using a jamming device, often leaving the car unlocked without the owner’s knowledge. This leaves the vehicle vulnerable for thieves to enter and steal contents or the entire car.
      • Countermeasures: To counteract jamming, some vehicle models now include “locking feedback” that alerts the user if the lock command fails. Additionally, awareness campaigns encourage users to double-check their vehicle’s locks manually.

      CAN Bus Attacks:

        • Process: Thieves physically access the vehicle’s electronic control unit (ECU) through exposed wiring (CAN bus) under the wheel arch or bumper. By sending false signals, they can bypass the ignition, allowing the car to be started without the key.
        • Countermeasures: Law enforcement agencies have emphasised the need for vehicle manufacturers to improve physical security around CAN bus access points. Some manufacturers have reinforced these areas to prevent tampering.

        Combating Keyless Theft

        • Technological Improvements: The National Vehicle Crime Reduction Partnership (NVCRP) is collaborating with manufacturers to implement advanced anti-theft features like motion sensors in key fobs, secure encryption, and limited signal ranges.
        • Legislation: Discussions are underway to restrict the sale of relay devices and jamming equipment commonly used in keyless thefts. This may include regulations for online marketplaces
        • Public Awareness: Police and crime reduction organisations promote preventive measures, such as storing key fobs in signal-blocking Faraday pouches, manually checking vehicle locks, and installing secondary anti-theft devices like steering locks.

        These combined efforts aim to address vulnerabilities in keyless systems and reduce the incentives for organized crime groups involved in high-value vehicle thefts.