Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [QUIET] · [TECHNOLOGY]

3 clusters · 18 sources · 25 days · First seen about 2 months ago · Last updated 22 days ago

Keyless vehicle entry security vulnerabilities

Overview

Security concerns persist regarding modern keyless vehicle entry systems, which remain vulnerable to relay attacks. In these thefts, criminals use devices to capture or bounce radio signals between a smart key and a vehicle to unlock or start the car without physical force.

A ten-year review by the German automobile club ADAC, covering over 850 vehicles, confirmed these vulnerabilities. The study found that nearly half of the tested models could be opened via relay attacks, and in roughly one-third of those instances, thieves could also start the engine. While some manufacturers have implemented Ultra-Wideband (UWB) technology to verify proximity and prevent signal manipulation, many brands still rely on older, insecure standards. ADAC identified a wide range of manufacturers whose tested models lacked sufficient protection, including Aiways, Alfa Romeo, Alpine, BYD, Chevrolet, DS Automobiles, Fiat, Honda, Infiniti, Isuzu, Jeep, KGM/SsangYong, Lynk & Co, MG, and Opel. Conversely, brands such as Dacia, Ford, Hyundai, Kia, Lexus, Mazda, Nissan, Peugeot, Polestar, Porsche, Renault, Seat, Toyota, and Volvo showed improved security, with 20 percent or fewer of their tested models being vulnerable.

Recent findings reiterate that while approximately 70% of tested vehicles show improved security, nearly half can still be opened using signal extension techniques. The ADAC is calling for all manufacturers to adopt modern security standards, noting that the technology to prevent these well-known thefts is available and can be implemented with minimal additional costs.

As the industry shifts toward digitalization, Volkswagen is expanding its digital key offerings by integrating with Apple Wallet, allowing users to unlock specific ID series models running software version 6.0.1 via iPhone. Additionally, many modern vehicles now include emergency measures for keyless systems, such as designated receiver locations in the center console or cup holder to read a key fob’s transponder chip if the battery dies.

Entities

ADAC · Google · Opel · Honda · Aluminum foil

Claims

What the coverage asserts, and how many sources carry each claim.

[○ 1 SOURCE] ADAC testing of over 850 vehicles shows nearly half can still be opened using signal extension devices. blomberg-nachrichten.de
[○ 1 SOURCE] Approximately one in three vehicles tested could have their engines started illegally via signal extension. blomberg-nachrichten.de
[○ 1 SOURCE] Ultra Wide Band (UWB) technology is considered a secure standard for keyless systems. blomberg-nachrichten.de
[○ 1 SOURCE] Volkswagen is enabling digital car keys via Apple Wallet.
[○ 1 SOURCE] Digital key functionality via Apple Wallet requires ID series vehicles and software version 6.0.1.
[○ 1 SOURCE] Modern vehicles feature emergency receivers to read key transponders at close range if batteries are dead.

Timeline

22 days ago

[TECHNOLOGY] 3 sources
ADAC study reveals ongoing security flaws in keyless car systems
An ADAC study of 850 vehicles shows that many keyless entry systems remain vulnerable to signal-extension thefts, despite the availability of more secure technologies like Ultra Wide Band.
25 days ago

[TECHNOLOGY] 15 sources
ADAC warns of security flaws in keyless car entry systems
An ADAC study of 850+ vehicles shows nearly half of keyless entry systems are vulnerable to relay attacks, allowing thieves to open cars and start engines by extending radio signals.
about 2 months ago

[TECHNOLOGY] 2 sources
Keyless car smart keys susceptible to relay attacks; Faraday‑style protectors advised
Keyless car smart keys can be cloned via relay attacks; shielding them in a Faraday‑style protector like foil or a card cage can help prevent theft.

Sources

apach57.fr · auto-medienportal.net · autogazette.de · autokult.pl · biznes.interia.pl · blomberg-voices.de · borncity.com · carandmotor.gr · extratipp.com · fenix-magazin.de · leinetal24.de · mannheim24.de · mobiflip.de · moto.pl · omegalive.com.cy · op-online.de · punjabilok.com · volksfreund.de

This summary has been updated 3 times: see revision history