Your car is a target – Don’t get hacked or duped

Your car is a target – Don’t get hacked or duped
© Piotr Adamowicz | Dreamstime.com, © Welcomia | Dreamstime.com

Ever heard of wrapping your key fob in aluminum foil? It sounds a little crazy, but it’s a smart move. Your key fob’s signal is surprisingly easy for criminals to intercept using cheap scanners sold online. Thieves can open your car without setting off any alarms. If you have a true keyless car model, they might just drive away. Wrapping your fob in foil blocks the signals. 

Scammers have even more tricks for targeting car owners and car buyers. Here are the newest ones spreading like wildfire.

The clever cloned VIN scam

A Boston woman paid around $40,000 for an SUV on Facebook Marketplace. The Carfax report looked legit, and Maril Bauter received a clean title from the licensing agency. It was smooth sailing for almost three years … until the police seized her vehicle.

As it turns out, when Bauter bought the 2019 Toyota 4Runner, it was stolen. She was the victim of a VIN-cloning scam.

It all starts with a stolen car or one totaled by an insurance company. The scammer finds the same make, model and year of that car and takes its VIN. It’s as easy as snapping a picture through the windshield.

The scammer then changes the VIN plate on the stolen or totaled vehicle to match the one on the clean vehicle. Now, the scammer can create fake documents and complete the sale.

Unfortunately, it’s hard to spot these scams. If you���re in the market and buying from a private seller:

  • Use a site like Carfax or AutoCheck to look for anything strange with the VIN.
  • Compare the VIN on the car (located near the windshield and in the door) with the title and all the other documents the seller provides.
  • Look for signs the VIN plate has been switched. Run your finger over that area.
  • Consider paying a mechanic or car inspection service to look for major issues or red flags.

Bauter’s story had a happy ending: Her insurance company paid out her claim on the stolen vehicle. That said, not every victim is this lucky, so be sure to do your due diligence if you’re in the market for a new vehicle.

Not the only car scam on Marketplace

An 18-year-old was arrested in Fort Lauderdale for posting his neighbors’ cars for rent on Facebook Marketplace. The scammer collected deposits and then sent renters to the car owners’ real addresses.

One neighbor said eight people showed up at her house over three weeks. Another got his car smashed by an angry would-be renter.

  • Never, ever pay ahead for a rental through a community sales platform. Really, it’s best to stick with a legitimate rental company.

Throwback attacks work, too

Old-school denial-of-service attacks on vehicles can shut down critical functions, like airbags, antilock brakes and door locks.

This attack is feasible since some connected cars have built-in Wi-Fi hotspot capabilities. As with regular home Wi-Fi networks, they can even steal your data if they infiltrate your car’s local network.

Also, it’s a matter of physical safety. Remember, multiple computers and Engine Control Modules run modern cars. If hackers can shut these systems down, they can put you in grave danger.

  • Regularly changing your car’s onboard Wi-Fi network password is a must. Turning off your car’s Bluetooth and Wi-Fi when they’re not in use is also a good idea.

The built-in monitoring is a security risk, too

Every newer car has an onboard diagnostics port. This interface allows mechanics to access your car’s data, read error codes and statistics, and even program new keys.

Anyone can buy exploit kits that can utilize this port to replicate keys and program new ones to use them for stealing vehicles.

  • Always go to a reputable mechanic. A physical steering wheel lock can also give you extra peace of mind.

Mobile malware

Another old-school internet hack reaches connected cars, specifically models with internet connectivity and built-in web browsers.

Crooks can send you emails and messages with malicious links and attachments that can install malware on your car’s system. Anything is possible once the malware is installed. Car systems don’t have built-in malware protections (yet), so this can be hard to spot.

  • Practice good computer and internet safety, even when connected to your car. Never open emails and messages or follow links from unknown sources.

Tags: Facebook, hackers, internet, malware, security, web browsers