There is an inherent vulnerability in the keyless entry and start systems of modern cars that allows hackers and criminals to gain access to them within seconds using a pair of radio gadgets worth just $22. This attack is known as ‘relay attack’ and happens only to cars that use remote keyless systems.
Keyless systems allow car owners to open and start their cars while having their car keys in their pockets. The car opens as soon as the owner approaches close enough. The driver enters, starts the engine at the push of a button and drives off – without ever having to remove the key from his pocket. This feature is very convenient for the users since they don’t have to search for their keys when approaching or preparing to start the car. Virtually all high-end cars offer the option of keyless entry. There are several reported cases of mysterious car break-ins and theft around the world that took advantage of this vulnerability. The most recent happened in the UK whose CCTV footage released by West Midlands Police went viral on social media:
This vulnerability isn’t really new though. It’s been known to car manufacturers and hackers for some years now. As far back as 2011, Swiss researchers published a paper detailing the attack. Since then, there has been several other research publications and demonstrations. Unfortunately not much has been done by car manufacturers to remedy the situation.
So for the time being the owners of cars with keyless systems only have to protect themselves. One possible option is to remove the battery from the the key. The problem with this option is that the car can only be opened with a physical key (the backup physical key is typically hidden within the wireless key fob), and started in the “dead battery” mode. This is not very convenient for most users. A better option is to shield your key with a ‘Faraday Cage’ (an enclosure used to block electromagnetic fields) in order to prevent communication between the key and the car at all times except when you wants to unlock the car.
