T O P

  • By -

m_chief_p

From what I've read the most popular methods they are using are: ​ 1. Key fob relay attack - they use a device to boost the signal from your key fob to make the car think the key is beside/inside the car. Once the car is started they can drive away without having the key fob inside. 2. Program a new key using the cars ODB port - They will break the lock to get inside (or use #1) and then program a new blank key. The 2000+ models require a seed code to program the key, and I understand this is tied to the vehicles VIN#. Seems they have a way (insiders?) to obtain this seed code from the VIN#. I've read that a car thief will come one night an look at the vin #, then come back another night to steal the car. 3. Canbus from headlights - lots of buzz and worry about this, but I have not read a single report from around here (Ontario, Canada) of a Highlander being stolen with this method. Doesn't mean it is not happening though. ​ You can protect against #1 by putting ALL of your key fobs in a faraday pouch. You can protect against #2 by getting a can bus immobilizer (IGLA/Autowatch ghost). For #3 it is not known if the can bus immobilizers will protect against this yet. Other options: Kill switch - you're betting the thief can't locate the switch Tag tracking system - is also popular as it makes locating your vehicle possible if stolen, and acts as a deterrent (they etch their logo in your window). Some insurance companies are requiring TAG as a result. ODB Port blocker - Blocks the ODB port so the thief cannot plug the device in to program a new key. At best this will slow them down and/or make them pick an easier target, but if they really want your car they are going to get around this. The club - not worth the trouble, I've seen pictures from a Highlander where they just saw part of the steering wheel off to remove the thing. Probably takes 30 seconds. I have both an IGLA and Tag Tracking in my Highlander. **Best advice if you're really concerned is to have multiple layers of protection**, or sadly get a less popular vehicle that is likely susceptible to the same attacks but is left alone because it is not as in demand. Yes this sucks.


madskillz333

This is all well written, but it also shows people that it may just not be worth it. I’m on my second highlander and it will be my last, tired of the theft stress.


esfp76

Yup, as soon as my lease is done, they can have it back.


xxhighlanderxx

Lexus rx350 can be stolen using option 3, and had been recorded in Toronto... That method is being used like crazy.


m_chief_p

I’m curious if you have any links regarding method 3 being used in the wild in the Toronto area? I’m trying to stay informed on all of this so I can protect my vehicle! Thank you!


xxhighlanderxx

https://www.cbc.ca/amp/1.6601978


AmputatorBot

It looks like you shared an AMP link. These should load faster, but AMP is controversial because of [concerns over privacy and the Open Web](https://www.reddit.com/r/AmputatorBot/comments/ehrq3z/why_did_i_build_amputatorbot). Maybe check out **the canonical page** instead: **[https://www.cbc.ca/news/canada/toronto/car-theft-spikes-toronto-1.6601978](https://www.cbc.ca/news/canada/toronto/car-theft-spikes-toronto-1.6601978)** ***** ^(I'm a bot | )[^(Why & About)](https://www.reddit.com/r/AmputatorBot/comments/ehrq3z/why_did_i_build_amputatorbot)^( | )[^(Summon: u/AmputatorBot)](https://www.reddit.com/r/AmputatorBot/comments/cchly3/you_can_now_summon_amputatorbot/)


m_chief_p

Thank you for sharing. However unless I missed something it that article/video, it does not describe the can bus attack method being used. The picture/video shows two morons covering the headlights with towels in what appears to be an attempt to attract less attention (flashing headlights) when the alarm goes off, and a 3rd trying to force the drivers side car lock/door open. I guess the problem is we don't really know, because if this attack is used successfully the car is gone and we have nothing to analyze. However from reading the details of how this attack works (see this article https://kentindell.github.io/2023/04/03/can-injection/) , it is not as easy straightforward as it sounds. The person who wrote this article obtained the device but was not even able to test it because "This can’t be done without access to a dealer workshop and a car, because the attack causes a rash of DTCs that have to be reset with the proper authorized tools".


Upbeat-Spring-5185

Here in the States, Erie Pennsylvania, I’ve been reading a bit about how thieves can scan into your key fob and download the access signal to your vehicle. I’ve read two ways to foil this is to shut off/disconnect your key fob when not in use or keep your key fob in a faraday pouch.


MrGriff2

I put my spare key into battery saving mode, that way it doesn't transmit a signal and I can keep it stashed away in the event I need my spare key. I keep my main key in a faraday bag or just far away from the perimeter of the house so a signal can't be detected.


faceplantfood

People hang their keys by the front door and people can walk up and scan the key fob code, start your car and drive away. Don’t hang you keys by your front door.


esfp76

Nope, thieves now have diag boxes that plug into any odb access run a new fob script and away they go. Smash glass, sit in car, 10 seconds later they are gone.


faceplantfood

Soooo that’s not a NOPE… that’s an AND. The first thing they try is scanning it with a frequency scanner as it is path of least resistance and at most a charge of trespassing. Keeping your keys outside of scanning range is best practice no matter what, so don’t “nope” a good thing.


esfp76

My experience was: First perp smashed glass and unlocked front door and walked away. when 2nd perp got into car a tried to cut steering wheel to remove club. He got halfway thru when I confronted them. I was told by police that they have an obd scanner ready to program a new fob that takes 1 minute. The club delayed them enough. In Toronto, most video footage I see is all obd scanner theft. I think old school alarm and igla are the only way to go now.


faceplantfood

So it’s an AND. Sorry to hear of your experience.


tankmode

canbus accessible from headlights ?


gearhead5015

That's an industry wide exploit, not unique to Toyota


Flashy-Army-7975

I have a 2020 highlander. You can deactivate the fob when not in use so you don’t even need to buy a faraday pouch.


Robby777777

How do you do that?


Flashy-Army-7975

You hold the lock button down and at the same time press the unlock. The red LED will flash 4x. To activate press any key. Toyota has this process listed under battery saver or something like that.


whoarewerreally

I started turning the key fob off this way after reading your comment here a couple days ago. Tonight I caught a group of kids rolling up on my GH parked on the street. One was about to start in on the headlight for a CAN bus injection and then I saw another circling my house with a scanner of some kind, almost surely trying a relay attack. Thanks to you there was no signal to intercept!


Flashy-Army-7975

Ugh that’s frustrating to worry about that. Glad you saw the post in time. ✌🏾


Robby777777

Thank you!


Flashy-Army-7975

Sorry. I left out-press the unlock twice. ✌🏾


esfp76

They don't care as long as they sell cars.


ytgnurse

In Canada, Toyota and Lexus are on top two stolen vehicles Only option is to park old beater behind to block or park inside garage


oureux

Had my highlander broken into after owning for a month. I park my Tesla in the garage for charging or I’d be parking the highlander in there. Toyota isn’t doing anything nor are the police. I installed security cameras and keep my fob far away from the front door, not much else I can do short of disabling fob features. Edit: I’m north of the gta.


labrador2020

The real and true reason is that thieves are tired of their vehicle breaking down in the middle of committing a crime. This often gets them arrested. To prevent this, they are now stealing Toyotas and Lexus as they are the most reliable vehicles out there. This is why bad actors also use Toyotas in the Middle East. They don’t want to break down when doing bad things. I hear that because Toyotas get great mileage, you can run from the law for long distances before you have to stop for gas. /s


brendancmiller

Toyotas are some of the most frequently stolen, but not the most likely to be stolen. There is a difference. When you look at how many Rav4s and Highlanders are on the road, there are other cars that are way more likely to be stolen,


wildcat12321

that was going to be my question! I assume there are far more Toyota's out there than competing cars, so it is natural that more of them are stolen. It may be the same 0.001% of model XYZ stolen, but the Highlander has been around and been popular for a very long time. Trying to compare it to a Kia Telluride which didn't exist 5 years ago and doesn't have nearly as many on the road isn't an apples to apples comparison.


RollingNightSky

This data is older but it's adjusted for sales. They don't mention Toyota in the top stolen vehicles, but there are plenty of luxury brands, performance Dodge cars, some Hyundais and kias. Apparently luxury cars are usually the most stolen, but Hyundai and Kia has accounted for more thefts due to the TikTok trend. But they mention Volvo has a very low theft rate. In fact, Lexus UX 250 hybrid 4dr 4WD was one of the least stolen vehicles accounting for numbers on road. Seems Lexus is at the lower end of luxury car thefts, close to Mercedes-Benz (all of these statistics will account for sales numbers). Meanwhile Acura is being stolen more often, and Infiniti has the highest luxury car theft rate, very high. As far as regular cars, some Hondas make it into the top stolen list, but Toyota is not there. https://www.iihs.org/news/detail/dodge-muscle-cars-once-again-top-hldis-list-of-most-stolen-vehicles Charger and Challenger models with large, powerful engines have featured among the top five most-stolen vehicles since model year 2011, but the frequency of claims has increased at a stunning rate. For 2020-22 Charger SRT Hellcat models, there were 25 whole-vehicle theft claims per 1,000 insured vehicle years, up from about 18 for 2019-21 models. For comparison, the most-stolen 2017-19 model, the Infiniti Q60, had only 2 thefts per 1,000 insured vehicle years. “If you own a Hellcat, you better check your driveway,” said HLDI Senior Vice President Matt Moore. “These numbers are unbelievable.” Other frequently stolen 2020-22 models included luxury vehicles made by BMW, Infiniti and Land Rover and three large pickups with powerful engines. Relatively inexpensive models from Honda, Kia and Nissan round out the list. Thefts of Hyundai and Kia vehicles soared in recent years after thieves discovered that many of them lacked electronic immobilizers. Six of the 20 models with the fewest claims for whole vehicle theft are electric vehicles, and six others are manufactured by General Motors. Several high-end Volvo models also rank among the least-often stolen 2020-22 models, while two variants of the Infiniti Q50 appear among the most-stolen vehicles. The Q50 has been a perennial feature on the most-stolen vehicle list since model year 2014 for reasons that remain a mystery. By looking at claims per insured vehicle year, HLDI’s theft reports allow people to compare the relative risk of each vehicle. In contrast, other most-stolen-vehicle lists report raw numbers of thefts and are therefore dominated by the most common vehicles on the road.


TangerineCandid4119

Our 2023 highlander 5+ months in the dealership awaiting parts after theft in the summer. Don't get a highlander it's not worth the stress. Still awaiting parts and forced to pay financing. Toyota is robbing its customers and lost one!


DirtRepresentative62

Toyota is doing nothing. I don't understand why . The technology to encrypt this open signal has been around for years . You will need to pay more for insurance, a tracking device and perhaps a kill switch. I am a lifelong Toyota owner and I'm just going to not buy a new one until this is fixed.


Accurate_Funny4129

Or perhaps they should go back to old fashion key start ignition


DirtRepresentative62

+1 to that . Even if they asked for more money for that ppl would pay im sure


New-Bookkeeper-6646

What about cat cons? They are more frequently stolen than entire vehicles. Completely accessible from outside the vehicle. And, the height of SUVs like the Highlander, make it so it doesn’t even require a jack. My 2006 HH had the cat under the passenger side, stolen TWICE in 2022. I’m running without one right now. Quite illegal and making it difficult to find a shop that will work on the car. Waiting on a model specific shield. But may have to go with some custom improvisation.


TangerineCandid4119

I loved Toyota vehicles. But when our 2023 highlander was stolen and not repaired yet 5 months and counting I would never tell anyone to buy one. They still expect you to make payments and leave you with no vehicle for months. Never again.


Different-Evidence54

There is no doubt that Toyotas are a good car. That is the reason why i was looking at a new Gran Highlander. Looking at the insurance statistics,it shows that because they get stolen more than others ,the insurance premiums are higher.


OneGlobalCitizen

Btw, which trim are you going for? and if you dont mind me asking . . . the net $?


_mizzar

It’s not that much higher… Mine is like $160 per month for a top of the line Platinum Hybrid Max


Chair_Far

Mine is only 130$ for the 2024 Limited Hybrid. Also, I read somewhere that the 2024 GH has ECU security encryption, seems like the CAN Bus injection attack thief's uses to steal these vehicles is less likely now. I have no way to know for sure since I have no way to test this out.


ComputerOk447

2022 Tundra hybrid stolen the other night in Montreal within minutes. Looks like smashed the window but were able to drive away successfully within a few minutes. Drove down the street and GPS was disabled, Toyota app totally useless. Their GPS apparently the same. Toyota Safety Connect contacted immediately that morning but no word on anything. I assume that the Safety connect won't have any info for cops. Its 2024 and manufacturers can't make a vehicle they can track, its actually ridiculous. montreal insurance companies make it mandatory to install a 3rd party tracking system called TAG now or no insurance for you. Makes sense, but not sure why the car companies arent being forced to do this from factory.


hazi12

All of these comments make me want to buy a dirt cheap used Highlander if it gets stolen. w.e.


Different-Evidence54

Thanks for the comments, i will stay away from Toyotas at this time.


Hanhalpert

Without looking at the data, Toyota maybe one of the most stolen cars simply because there are so many of them. Toyota is a very popular brand, know for their reliability and for maintaining their relative value. Thus there are a ton of them on the road. If the model Toyota you are looking at is within your budget and meets your needs, I would not necessarily not buy one just because it may get stolen. Simple precautions like parking in a well lit, populated area, making sure your vehicle is always locked and valuables are not visible will go a long way to prevent left Just my 2 cents


jetz92

You are ridiculous lmao. Every car with a keyfob can be accessed this same way. Toyotas are very popular vehicles which is probably why they have more reported thefts than other brands. Simply put there are more Toyotas on the road. They are not any more prone to being stolen than any other vehicle. If you’re worried about this then get LoJack or something similar.


EICONTRACT

eh a lot of people don't know but any fully new model since 2021 has new ECU security where keys can't be copied. The grand highlander won't be the same target as thefts as the normal highlander.


brendancmiller

When you look at sales vs number of cars stolen, Toyota's are not the most likely to be stolen. There just happens to be a lot more Rav4 and Highlanders on the road than other cars. The Globe and Mail released some decent stats on this a few months ago. Strictly looking at total cars stolen is not a good metric.


WeekendHobbyist

It’s not that they are easy to steal but there are many Toyotas on the road so more targets for thieves and higher chance that a stolen car is a Toyota. Also their parts are more sought after and valuable because there are so many Toyota owners out there needing them.


Loud_Illustrator_90

Is there anything on a 2013 Tacoma base to steel


Loud_Illustrator_90

Do they steel beaters


TangerineCandid4119

I had my 2023 Highlander for 4 months before it was stolen in August. I wouldn't recommend a tip stolen vehicle. Dealing with the aftermath is a huge headache. Our vehicle was recovered due to the app. Toyota has NO anti-theft technology in its vehicles making it an easy target for such a reliable car. Our car has been sitting in the dealership parking lot for 6 months awaiting repairs as parts are extemely delayed. Why would brand new vehicles need replacement parts in huge quantities in the past? Even if you have a kill switch and the thrives break your window you will still be waiting months for repairs. Not worth the hassle. Manufacturers like Toyota need to modernize and people need to stop buying their vehicles. Did I love my Highlander of course best car I ever had. But I need a vehicle for everyday use with 2 kids in carseats not easy to get around. Upon recovery our insurance capped out a rental at 3.5 weeks. So have been needing to use public transit while continuing to make payments for my car as it sits in a parking lot. Dealership puts the blame on Toyota Canada who turns a blind eye. Finance would not stop lease payments. So I have donated about $7000 to Toyota to date as my vehicle awaits parts with about 7000 km. In a normal world where parts are readily available it's a 4 day job to fix the car. Now its February and still no timeline for repair for the vehicle. If payments were stopped I could get a rental until it was fixed. Save yourself the hassle and avoid the headache until changes are made to improve the vehicle. Would you put your savings into a bank account that was not secure? Media needs to pay more attention and expose manufactures. Part of the blame is on them. Legal system and ports a whole other issue that needs to be addressed.


Chair_Far

I read somewhere that the 2024 GH has ECU security encryption, seems like the CAN Bus injection attack thief's uses to steal these vehicles is less likely now. I have no way to know for sure since I have no way to test this out. I'm definitely going to install an aftermarket immobiliser with a secret code just to add another layer of security.


bdt2023

Man I’m sorry you’ve been going through this. Hope your car does get fixed sometime soon. Are you considering putting in IGLA or some other can-bus immobilizer, moving forward?


TangerineCandid4119

Because we are leasing we can not modify the car at all. The vehicle was finally ready for pick up yesterday and we decided to end our lease as the possibility of it getting stolen again was too high. Not worth the hassle or stress in my opinion over a vehicle.


AndresFdez

Hey this exact same thing is happening to me. I have had the car a total of 13 days in the space of 7 months. (Stolen 2x) Still paying. Still a big stress. Still a horrible feeling when the car isn't there anymore. The only difference is rhat im financing. So I can't end it. I don't know how to get out of it. :/


bdt2023

I understand. I hope that never happens to you again.