Law enforcement agencies in France, Latvia and Spain have arrested 31 suspects believed to be part of a group that used software to steal vehicles without using a physical key fob.
According to the EU Criminal Justice Cooperation Agency (Eurojust), the suspects have built or used software that copies the electric keys of certain car models and is advertised online as a car diagnostic tool. .
“Criminals have targeted the keyless cars of two French carmakers. A fraud tool – marketed as an automotive diagnostic solution, is used to replace parts the vehicle’s original software, allowing the door to be opened and the engine started without the need for an actual key fob,” Europol said.
“The perpetrators of the scam are constantly updating and tweaking their software, to counter measures taken by companies to enhance the security of their vehicles,” Eurojust note.
On October 10, 31 suspects were arrested in France, including the managers of the company believed to have built the software. Authorities searched 22 locations in France, Spain and Latvia. They also appropriated 100 million euros, 12 bank accounts, real estate, three luxury cars and a website domain.
The French Gendarmerie’s Cybercrime Center (C3N) opened the case at Eurojust in September 2022 while Europol said it had supported the investigation since March 2022.
Neither agency named the two French car manufacturers. Eurojust could not provide more information about the hacks or affected car manufacturers, and ZDNet has asked Europol for more information.
The attack sounds different from recent relay attacks, in which thieves captured a radio signal between a key and a vehicle. UK law enforcement warns of a spike in keyless car thefts last year. Authorities say to prevent relay attacks, luxury car owners should store their keys in a metal case or protective bag.
