Photo gallery<\/a><\/p>\nAt least 2.2 million cars on the road today are vulnerable to an attack that allows thieves to lock and unlock doors and immobilize vehicle engines remotely via a Bluetooth connection, computer scientists at the University of California San Diego have found.<\/p>\n
Attackers can get access to cars from as far as five yards away. Most of the vulnerable vehicles were bought at Honda, Toyota, Mazda, Ford, and Jeep dealerships in Southern California from 2017 to today. But because these vehicles are resold on the second-hand market, several hundred thousand vulnerable vehicles can also be found throughout the United States, Canada and even as far as Japan. Many vulnerable cars display a sticker with the word \u201cKARR\u201d or \u201cSWDS\u201d on the driver\u2019s-side window.<\/p>\n
The vulnerability is due to a device controlled via a smartphone app that is typically installed by dealerships to manage vehicle inventory and prevent theft. The device, installed underneath the bottom of the dashboard on the driver\u2019s side, connects vehicle and app via Bluetooth. The app makes the device perform functions similar to a key fob: lock and unlock doors as well as honk a horn and flash headlights as a warning. In addition, the device can prevent the car from starting as long as the car isn\u2019t already running.<\/p>\n
All KARR-SWDS devices rely on the same secure key \u2013 meaning that once the researchers cracked that key, they had access to all the cars equipped with these devices. It\u2019s a bit like setting all passwords for a line of devices to 1234 and making it impossible to change the password.<\/p>\n
When a dealership sells a vehicle, they market the device and app as a paid upgrade \u2013 an anti-theft tool as well as a tool to control the car via an app. Even if the buyer declines the upgrade, the device remains active, still leaving the vehicle vulnerable to an attacker in certain situations.<\/p>\n
The company manufacturing these devices, Acrisure, released a patch to fix the vulnerability on July 20, 2026. The fix requires downloading an app. \u201cMany car owners don\u2019t even know that their vehicle is vulnerable. So we wanted to make sure they were aware by publishing this study,\u201d said Aaron Schulman, a professor in the UC San Diego Department of Computer Science and Engineering, and one of the study\u2019s senior authors.<\/p>\n
The vulnerability could allow thieves to steal cars more easily. \u201cInstead of smashing a window to get access to a vehicle, thieves could simply connect remotely via Bluetooth to the device inside the vehicle, and make it unlock car doors,\u201d said Jerry Yu, who earned a master’s in computer science at UC San Diego and the paper\u2019s co-first author. Once the car is unlocked, attackers can use a variety of tools available to locksmiths to then start the car and drive away.<\/p>\n
The researchers, led by Schulman, will detail how they discovered the vulnerability and reverse-engineered it at the DEF CON conference Aug. 9 in Las Vegas and the USENIX Security conference Aug. 12 in Baltimore, Md.<\/p>\n
In the study, researchers identified at least 1.4 million vulnerable vehicles, but further analysis by the UC San Diego researchers increased that number to an estimated 2.2 million \u2013 at least.<\/p>\n","protected":false},"excerpt":{"rendered":"Article Content At least 2.2 million cars on the road today are vulnerable to an attack that allows…\n","protected":false},"author":2,"featured_media":411979,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[28],"tags":[74,76,75],"class_list":["post-411978","post","type-post","status-publish","format-standard","has-post-thumbnail","category-san-diego","tag-san-diego","tag-san-diego-headlines","tag-san-diego-news"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts\/411978","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/comments?post=411978"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts\/411978\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/media\/411979"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/media?parent=411978"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/categories?post=411978"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/tags?post=411978"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}