SRT Hellcat Forum banner
  • Hey Everyone! Vote for the Site Favourite HOTM winner for the year of 2022 HERE!

Slew of Burglaries From Vehicles Using New Tech

10900 Views 76 Replies 28 Participants Last post by  ezlife45
In Los Angeles and elsewhere there has been a rash of burglaries from vehicles utilizing an RF amplifier that will boost your key fob signal, otherwise too weak to open your car, to open your doors and trunk. The little black box amplifies your own secure code so that your car thinks you are standing at the door.

The thief then enters the vehicle takes what he wants and leaves. Most often they are on bicycles to make quick getaways. Numerous instances have been captured on video.

The solution is simple, use a Faraday cage type pouch or container to prevent the signal from reaching the vehicle. The author of the article I will link you to below suggests using your freezer which I don't recommend as that will prematurely age your fob's battery. Aluminum foil does NOT work, some dumbass news reporter here in L.A. (John Gregory) suggested that without even testing it and I can assure you it does not work.

Amazon sells Faraday pouches which are ridiculously expensive but will work. My wife, genius that she is found the perfect solution for us in our kitchen, reasonably priced, incorporating a sort of Faraday technology (the mesh metal screen on top) and it works flawlessly blocking the signal right next to the vehicle. Our solution is a stainless steel sifter with stainless steel screen built into the lid.

The media also recommends a microwave oven as a storage device, I don't like that solution either for obvious reasons.

I found out by accident the other night that the Hellcat FOB has impressive range. From 40 feet way through 2 load bearing walls and one interior wall I unintentionally unlocked the doors. Apparently, these amplifiers the thieves are using are sensitive enough that they can work with signals too weak to open the car by fob alone. The amplifier can take the weak signal and boost it enough to access the car.

I am not taking any chances some of thefts occurred within 5 miles of my home. I strongly suggest that we take this seriously, secure your fob.

I searched the forum didn't find any info so I thought I would share my solution. I know many have heard the story but apparently not enough to prevent the thefts that occurred last week here in L.A. News story video, etc. below photo.

Product Audio equipment Cylinder Filter Microphone


CNN Story:

Article regarding thefts: http://www.nytimes.com/2015/04/16/style/keeping-your-car-safe-from-electronic-thieves.html?_r=0

Fob guard: Fob Guard: Ideal Faraday Cage for Car Keyless Entry Fobs
See less See more
61 - 77 of 77 Posts
cant someone create a device that records the signals that the fob and car transmit and then just replay them back? Think of it like a learning remote for your tv. Same concept.
cant someone create a device that records the signals that the fob and car transmit and then just replay them back? Think of it like a learning remote for your tv. Same concept.
No, vehicle uses rolling code security, your tv remote does not use any security.
Nobody is advocating carrying the fobs in a "spaghetti strainer" evidently you overlooked some details. The small sifter is used at home and it was small, convenient and most importantly immediately available and works 100% without fail adjacent to the car. For travels there are several convenient alternatives available on Amazon, etc., that are specifically designed to block RF, GPS, etc. These alternatives are pouches that are flat when empty.

Clearly, not everyone feels there is a threat. Good luck to you.


how can you know your homemade cage works, or the RFID/ RF/ LF/ UHF/ blocker type devices on amazon/ as seen on tv ads/ etc / work without testing with one of these amplifiers?

wonder where they got the idea about putting the fob in the freezer? ahemsnowdenahem




"We note that the main reason why relay attacks are possible on PKES systems is that, to open and start the car, instead of verifying that the correct key is in its physical proximity, the car verifies if it can communicate with the correct key, assuming that the ability to communicate implies proximity"



the amp can be built for 17 bucks from what i read and speed betweeen points is critical in the attack..





Attack Mitigations:

Store the key fob in a "Faraday cage"

Experiment with removing the battery from the fob.

Some auto systems have a "dead battery fallback" provision which relies only upon passive RFID proximity.

Longer term: RF Distance Bounding

Measure the Challenge/Response round trip time.

300,000,000 meters / second (299,792,458)
300 m/uS or 0.3m/ns or 3.336 ns/meter
1 meter round trip: 6.67ns

Transponder *must* have a response time variability that's small in relation.


nice post. ;)
See less See more
my solution for now: disable passive.. keep nothing of value in the car. also: video cameras :cool:
  • Like
Reactions: 1
my solution for now: disable passive.. keep nothing of value in the car. also: video cameras :cool:
video cameras could be considered valuable.
video cameras could be considered valuable.
i meant outside the car, focused on the car.. but not practical in public spots.. this will get reverse engineered quickly. part of it already is.. i have faith.
If the key fob can't be detected by the car there's no threat. Keeping it sheilded is the only real defense. If you unshield it at car to enter exit whatever you are there too.

Not seen amything yet on Hellcats that says what type of interface is used it may be relay risk is minimal, or not.
I have disabled "passive entry" to disallow easy entry by door. Since the keyless opening of the trunk cannot be disabled in software, I am now considering disconnecting the external trunk lid button.
Don't car still polls for nearby key fob. If one doesn't respond there's nothing to relay, which is why sheilding it (if hellcats are more openly exposed to a relay hack and that's not known, to me anyway) is the best option.
I have disabled "passive entry" to disallow easy entry by door. Since the keyless opening of the trunk cannot be disabled in software, I am now considering disconnecting the external trunk lid button.
do you keep stuff in the trunk or car often? my car is always empty.. i am one of those guys.. i have nothing in the car.. but someone crawling through it to find that out through the trunk and back seats would piss me off something awful. please let me know what you decide to do and if you disconnect; how you did it.
While turning off passive entry is a good first step, please keep in mind that it is not just the passive entry that is the problem. Apparently some of the thieves do have a way of activating the unlock button on their amplifier. Just watch the CNN video where the Escalade's unlock button is activated and you can hear the locks clicking before the guy opens the door.
When you put your fingers under the door handle using the passive system it unlocks the doors. This has nothing to do with the button on the remote.
There was some discussion on this earlier in the thread. The thief tech discussed here ONLY bypasses passive entry (aka keyless entry). If you get rid of this feature (passive entry), then the thief's amplifier tech becomes useless.
If your car is locked, including the trunk, if you attempt to open the trunk, minus the key fob in range, will you get in, will it open?

If the key fob is out of range of the car, but is within relay hack range, if the trunk is locked and the fob poll response (from car) is relayed and car detects response, and trunk access is attempted, what do you think will happen then?

Im asking as I may have missunderstood if defeating passive entry also defeats trunk access? Relay hacks only work if the fob can be activated, manually or otherwise like getting polled, get that.
Well better hope fca gets on board using this

MCS3142 - Security- KEELOQ® Encoder Devices

(As of last year not.)

Or adjusts too similar ota.

Or anytime you use your fob, your exposed, unless you know what key sequence to use to clear last authentication key generated amd when.
Which may mean still exposed to rolljam.
My apologies for bumping this thread, but I wanted to pass along a simple solution. As already stated, disable the passive entry. In addition, using aluminum foil, I created a small pouch, 3x3 inches, in which I store my fob at home. I also created a 5x5 pouch for my spare fobs. I tested the fob's distance from inside my front door to where my HC is parked out on the drive way. Each fob unlocked the doors from 20'. When tested from the same location inside the aluminum-foil pouch, the fobs failed to unlock the doors or remote start the car. With the fob inside the aluminum-foil pouch, I began walking towards the car while repeatedly pressing the unlock button. It was only after I was next to the car and just at the driver's side front tire that the doors finally unlocked.

Technology Electronic device Car alarm Gadget
Font Technology Auto part Number Games

Attachments

See less See more
4
  • Like
Reactions: 1
my solution for now: disable passive.. keep nothing of value in the car. also: video cameras :cool:
Disable Passive. Keys locked down. Works!
Bump this thread up again because a friend had his TrackHawk stolen from the dealership. Dropbox. Overnight. No protection on the box.

Did the RFID trick. He didn't have passive entry OFF (PKE Speak).

Gone. Done. Not found.

I turned off PKE a while back. Then started playing with the keyfob protection. (Bag, Farade, Etc.)

It works!

Our vehicles look for the FOB. If the FOB isn't transmitting, there is no signal to grab.

Keep your FOB's protected. Garage or not. Turn OFF PKE. It's simple. Do a search on this.

I unlocked my car with the FOB. Then put it back in the bag. Car wouldn't start. Dash read "Push Button with Key Fob to Start" .

Can not copy what isn't there.... I know there is some other way with mimicking/copying/making a new FOB. Get in my garage first, then I'll worry about that.
See less See more
Make an envelope out of aluminum foil. Not a sleeve and you can't even start the car from inside. Or unlock from outside.
61 - 77 of 77 Posts
This is an older thread, you may not receive a response, and could be reviving an old thread. Please consider creating a new thread.
Top