A New Car Theft Method – Headlight Hacking or CAN Injection

Car theft using “relay attack”

First and foremost, I will never tire of emphasising that the factory-installed security systems in cars are insufficient to protect them from thieves!
The issue lies in the fact that many owners mistakenly believe they are adequate until they fall victim to car theft—an experience I can assure you is far from pleasant.

Thieves actively seek out and exploit weak points in cars to facilitate easier theft. Consider that, in a maximum of two minutes, they can make off with an asset costing tens of thousands of pounds! Choosing not to install additional security systems is akin to “gifting” your car to thieves—a costly gift handed over willingly to a stranger.

Until recently, the primary method for stealing keyless cars was the “relay attack”. By now, almost everyone is familiar with what a ‘relay attack’ entails. For those who may still be in the dark about it, let me explain briefly how it works. Typically, a pair of thieves use two devices: an amplifier and a receiver. One device scans for the key signal near the house, while the second device with a receiver, positioned near the car, transmits it to the vehicle’s system. Usually, one of the thieves standing near the car must pull the door handle, prompting the system to request the key’s code. If there is an amplifier and a receiver between the car and the key fob, the code is sent without any problem, and the car opens.

This serves as a reminder of how simple it is to steal a car lacking additional protection systems! The accompanying photo is extracted from a video on the West Midlands Police YouTube channel. At 01:01:41, they exit their car, and by 01:02:56, they vanish with the stolen car. Since maths is not an opinion, it took precisely 75 seconds to steal the car. Draw your conclusions!  However, that is not the focus of today’s discussion!

Do you need A professional CAR SECURITY UPGRADE?

Our expert team is ready to help you set up the best anti-theft solution for your car. Get straightforward advice and professional installation to keep your vehicle safe and sound.

“Headlight Hacking” or “CAN Injection”

With that being said, let’s return to today’s topic, which delves into another method discovered by thieves to steal cars. Thieves are becoming increasingly ingenious, constantly discovering new ways to bypass security systems. The latest method gaining popularity is known as “Headlight Hacking” or “CAN Injection,” providing thieves with a means to bypass entire smart key systems and steal cars. How does it work?

In modern cars, there are between 20 and 200 control units that manage various systems. The ECUs communicate with each other using a protocol called CAN bus (CAN stands for Controller Area Network). The weak point of this communication system is that it is not encrypted and does not require authentication. Thieves look for a spot to easily access the CAN bus connection wires, which usually pass behind the headlights. With a simple CAN injection device, they connect to the cables and send false messages such as ‘Key is valid, unlock immobiliser’ to the engine control system and ‘Key is valid, unlock doors’ to the doors ECU. They do not even damage the car; they simply open the door, start the car, and drive away, all without the key. Let’s say that, in a nutshell, is what happens, although things are more complex than that.

CAN Injection Devices

CAN injection devices are sold on the internet as ’emergency starting’ devices for car owners or mechanics (who are they kidding?). On the dark web, these devices can be found hidden inside Bluetooth speakers or other devices. For Toyota cars, thieves hide their devices inside a JBL Bluetooth speaker. Even if the police stop them, it looks like a regular speaker, so no one suspects anything.

But here’s the thing: it’s not just Toyota or Lexus cars they’re going after. You can find these devices for lots of other car brands like Fiat, Peugeot, Nissan, Ford, BMW, Volkswagen, Jeep, Maserati, Honda, Renault, Jaguar, and more. Most stolen cars are shipped by container to Africa. Car manufacturers know the problems, but the solutions they find (when they find them!) will be applied to new cars. What about the cars that are already on the road? The owners will have to take care of those.

Do you need professional service?

At the moment, how can we protect a car from thieves?

Ghost II immobiliser and StarLine security systems – the best way to protect your car

Ghost II immobiliser – can steal your car only if they tow it

The Ghost II immobiliser provides optimal protection against car theft! Even if thieves manage to open the doors, driving it becomes an impossible feat! Starting the engine or shifting gears becomes an insurmountable challenge for them. However, exercise caution when selecting an installer—trust only serious professionals for the job. Beware of anyone claiming a half-hour installation, as a hastily installed Ghost can be easily detected and disabled by savvy thieves. A proper installation typically takes about two hours, with certain vehicles like Land Rover and Lexus requiring even more time.

Take the Lexus RX in the photo above, for example. Thieves attempted to steal it, but thanks to the Ghost II immobiliser, their efforts were in vain. While they caused damage to cables and the bumper, we added an extra layer of protection—an exceptionally loud alarm system with sensors on the bumper. This upgrade immediately notifies the owner of any unauthorised attempts, including the notorious Headlight hacking method.

Similar success was seen with a Range Rover Sport fitted with the Ghost II immobiliser. Thieves gained access but couldn’t drive the car. Frustrated, they sought the Ghost immobiliser and eventually gave up when they couldn’t locate it. Despite damaging wires and triggering emergency mode, the owner is relieved the thieves failed to make off with the vehicle.

These examples showcase how Ghost effectively thwarts car theft. We consistently recommend our customers install Ghost, urging owners to stay one step ahead of potential thieves.

Starline Security System – another viable alternative for car protection

In comparison to the Ghost immobiliser, Starline Security Systems offers an integrated GPS tracker and alarm, along with additional features.

Our team of car security experts can provide guidance and install supplementary protective devices, ensuring your car’s security is maximised against potential theft.

Do you need professional service?

Conclusion

The increasing number of car thefts is significant in the UK and affects many car owners every year. According to the most recent statistics provided by Statista, 130,521 cases of motor vehicle theft were reported in England and Wales in 2022/23. This marks a substantial increase of 20.8 per cent compared to the previous year, during which 108,028 vehicles were stolen, an already alarming number. 

Considering the statistics, there’s no room for complacency. It’s advisable to take preventive measures before your car becomes a target for thieves!