Circuit that used software to "hack" and steal vehicles without physical key, dismantled on Monday by Eurojust and Europol, in cooperation with the police of France, Spain and Latvia.
With the support of Eurojust and Europol, French authorities, in cooperation with Latvia and Spain, arrested 31 suspects who used software to enter and boot without a breach, cars with physical keyless entry and start systems.
Their action was in France and they preferred two specific French car brands. Over €1 million in assets were seized and 12 bank accounts were opened. They also shut down a website that advertised the "service" but also sold the specific software.
The suspects allegedly used software marketed as a car diagnostic solution. This tool was able to replace the original software of the targeted vehicles, without adhering to the protocol security of the manufacturers and without the original key.
Once the new software came in, it allowed them to open the car's doors and start it without the electronic key. Law enforcement authorities did not share how the fraudsters were able to install – attach this malicious car diagnostic solution to the targeted vehicles. It is possible that they have paid someone to do this undercover at car dealerships, garages or any other place where vehicles are left unattended for short or long periods.
The perpetrators continued to update and adapt their software to deal with the measures that the companies implemented from time to time to enhance the security of their vehicles.
Europol reports that the 31 people arrested include software developers, resellers of the malware and the actual car thieves who used the software to steal the vehicles.
