■■■■■ Criminals producing devices that unlock cars arrested in international operation.
Five suspects were arrested during an international operation targeting a network of car thieves. The group manufactured reprogrammed speakers and other technical devices that made it possible to unlock cars with decoded keys, bypassing the security systems. The operation, coordinated by Eurojust, was carried out by French and Italian investigators.
The car theft devices mounted in JBL Bluetooth speakers appeared on the black market around the end of 2021 and exploited a previously unknown vulnerability in Toyota and Lexus immobilizers (at least models from 2016-2021).
The attack was separated into two parts:
1️⃣ The attacker find an accessible CAN bus, connect the “JBL” device to it, and unlock the car.
2️⃣ Then “JBL” tool is connected to the OBD-II to simulate an emergency engine start without a key.
https://www.eurojust.europa.eu/news/criminals-producing-devices-unlock-cars-arrested-international-operation