Hyundai and Kia car thefts fall sharply after software upgrade, study finds
Hyundai and Kia car thefts fall sharply after software upgrade, study finds
Many Hyundai and Kia owners have been targeted by thieves, but a simple tech fix can help keep vehicles safe.
A social media trend, dubbed the "Kia Challenge," has appeared to compound the automakers' problems in recent years, with people posting videos showing how to steal Hyundai and Kia cars. At its height, the Kia Challenge was linked to at least 14 reported crashes and eight fatalities, according to figures from the National Highway Traffic Safety Administration.
About 9 million vehicles have been impacted by the rash of thefts, including Hyundai Elantras and Sonatas as well as Kia Fortes and Souls. Hyundai and Kia earlier this year agreed to pay $200 million to settle a class-action lawsuit filed by drivers who had their vehicles stolen.
Technology is helping foil car thieves making life miserable for owners of Hyundai and Kia vehicles.
Hyundai and Kia upgraded their cars' anti-theft tech in early 2023. Vehicles equipped with the enhanced software will only start if the owner's key, or an identical duplicate, is in the ignition.
The rate at which the Korean automakers' cars are stolen has fallen by more than half since the companies upgraded their anti-theft software, according to new research from the Highway Loss Data Institute (HLDI). Hyundai and Kia thefts have soared in recent years after criminals discovered that certain car models lacked engine immobilizers — technology that has long been standard in other vehicles.
You're viewing a single thread.
Hyundai and Kia upgraded their cars' anti-theft tech in early 2023. Vehicles equipped with the enhanced software will only start if the owner's key, or an identical duplicate, is in the ignition.
Fucking.... What? A 2023 anti theft technology upgrade added the space age cutting edge concept of starting the car with... the key?
If my car could start without the key in the bloody ignition I'd be furious, that's what the key is for, haha. You can add extra doohickeys to enhance security, but the first line of defence is the key that starts the car.
Absolute madness.
Keyless start is fucking awesome though, just get in the car and drive. I wouldn't even consider a car without after having one with it. Pretty much all other manufacturers have this in a safe way that doesn't make the cars easier to steal. Its not the keyless start that's the issue, its how they implemented it.
I mean, many new cars don't even have an old school key ignition at all.
A lot of smart key cars are vulnerable to relay attacks. It's not a solved security issue by any means.
AFAIK they're not anymore vulnerable than central locking systems
Yes they are, because keyless listens to the car asking for authorization, so you can amplify the car signal hoping the key is not too far off, and unlock the car without any other work.
Nobody is fucking doing that, though! This isn’t a “oh I will hack this person using a relay attack” attack, it’s some dumb kids breaking into cars using physical measures. They are NOT going to be using a RELAY ATTACK
They are. It’s not incredibly common, but it’s not rare.
My coworker had his car stolen from his driveway. He believes it was a relay attack.
That being said, it’s super easy to mitigate by putting your keys in a metal bin.
Challenge Accepted
What’s more, all keyless cars still have a fob with proximity and if the fob dies, they legally have to have a way to start the car without the fob battery which is why they all have an nfc reader somewhere (usually in a cup holder) so you can put you dead fob on it and the car will start like normal.
All keyless start kias and hyundais are/were immune to the Kia boys trick
So what was the exploit then? They could get in to the car without the key?
No engine immobilizer was the ultimate issue. And from what I understand, it was just an issue with models sold in the US, so all this misery was caused by a manufacturer’s cost saving measure.
ETA: To clarify, the cause was a manufacturer’s cost saving measure enabled by the US regulations’ lack of a requirement for engine immobilizers.
Yeah, by breaking the window. Then they rip out the ignition cylinder and turn the electrical switch just like on old cars. They didn't put any kind of electronics into the key to prevent this from happening. Most keys from about 1999+ have an NFC type "chip" in them that prevents the car from starting without a key that is programmed to the car.
Aah, so it actually has absolutely nothing to do with keyless access and driving like most seem to complain about.
Still, it would be cool if they didn't charge hundreds of dollars for a replacement key that costs them a couple bucks.
They were vulnerable because they didn't use chipped keys therefore people could break the ignition cylinder off and rotate the actual switch behind it to start the car. Cars with immobilizers still wouldn't start even if you removed the lock cylinder because the sensor didn't detect the chip. This is basically how most all cars worked prior to the 90s/00s which is where the trope of "using a screwdriver to steal a car" came from.
I'm really curious how they were able to add this in using software alone since you'd need some sort of sensor to detect the key along with keys that have a chip embedded in them.
😄so, my dacia spring can be stolen like that as well? It has one key without even a battery 🤣 (I think) Luckily I live in peaceful Switzerland, so I don’t even have to lock the car overnight..
Edit: it locks the steering wheel if not started, maybe that would be enough?
You might have an immobilizer as no battery is needed in the key, it's just a little chip embedded inside.
As far as the steering wheel lock, I think it can be defeated as well as those were used at least as far back as the 1970s and cars were still stolen then too. I believe people just hammered a screwdriver into the ignition to be able to bypass it.
You should Google your model of car to see if it has an immobilizer.
I see 😁👌🏻 good to know
I don't know this to be a fact, but we own a Kia targeted by this whole 'challenge' business, and my understanding is that this issue is primarily because remote start was a factory installed feature for most of the generation and the "software update" that enhances security prevents remote starters from working.
I had my Sonata stolen last year. The problem is that, by default, there was neither a key checker nor a steering immobilizer built into the vehicles. These are industry standard features for every car manufacturer... Except Kia and Hyundai. These are required features in every car sold in every Western nation... Except the United States. To have excluded this literal 90s tech from their vehicles when they're so common that no one would ever stop to think about whether their car has them constitutes a serious lie by omission on the part of Kia and Hyundai, in my opinion. If I knew that all you had to do was rip off the ignition and shove something onto a peg to screw off with the car, I would have told the dealer to stick it up his butt.
For those wondering: I had comprehensive insurance, so I was paid the full value of the vehicle after it was totaled. I bought a Toyota Camry with the money and it's a great car. I am never buying Kia or Hyundai cars again and I recommend everyone else avoid them from here on out. Like, if this is what they're willing to do to save $30 per assembled vehicle, what else might be lurking in their newer vehicles that we won't know about until it's too late?
Nope, they just went so fucking cheap that they didn’t even bother verifying the presence of a key to start the car. It’s got nothing to do with technological hacking, it’s just the same basic hot wiring that was pervasive before the invention of computers.
Yep. No one would have stolen my SAAB anyway, since it was a stick shift, but if someone had tried, they'd have gotten a nasty surprise. On the '80s models the stick shift had a half inch steel pin that locked the gear shift of the car in reverse if a sensor in the ignition didn't sense the key, and tell it to disengage. You could hotwire the car just fine, but I would almost pay to see how you explain to the cops why you're driving down the road in reverse.