This $199 hacking tool could likely enable thieves to take your vehicle.

      Hyundai / Flipper

      Subscribe to The Drive’s daily newsletter

      Stay updated with the latest automobile news, reviews, and features.

      We exist in an era where one viral trend in car theft is quickly replaced by another, and it happens frequently. Over the past few years, the most prominent carjacking trend has undoubtedly been the Kia Boys, who focus on Hyundai and Kia vehicles with fragile and easily bypassed security systems. These thefts became so rampant that they prompted recurring news segments warning the entire country. Now, it appears that another trend may be emerging, as criminals exploit a device known as Flipper Zero to gain access to vehicles from over a dozen brands.

      On Thursday morning, investigative tech journalism outlet 404 Media released an extensive report on this issue. The article details how hackers are misusing the $199 Flipper Zero—a device described by its makers as “a versatile tool for hardware exploration, firmware flashing, debugging, and fuzzing”—to unlock cars without a key fob. We have previously reported on these compact white-and-orange devices, first when tech enthusiasts used them to open Tesla charging doors remotely, and again when someone discovered how to use them to change traffic lights to green.

      This new application of the Flipper Zero is considerably more malicious. 404 Media interviewed a hacker from Russia named Daniel, who claims to have developed the “Unleashed” firmware that allows devices to carry out various RFID and USB attacks. “Maybe someone is using it to steal from cars or steal cars,” Daniel stated, asserting that locksmiths and auto shop owners have a “demand” for the firmware. He offers Flipper Zero patches for either $600 or $1,000, based on whether customers are looking for the latest version or updates with additional support.

      Daniel informed 404 Media that he has sold the firmware to around 150 customers over the last two years, and he collaborates with another hacker known as Derrow.

      “Kia Boys will become Flipper Boys by 2026,” noted Cody Kociemba, a reverse engineer also recognized as Trikk, in his conversation with 404 Media.

      This technology has significant potential to grow because it enables thieves to access a wide range of vehicles. From Kias and Hyundais to Fords, Hondas, Subarus, VWs, and numerous other popular brands, many widely-used models are at risk. Nearly 200 specific examples can be found in a chart that Daniel shared at the beginning of a recent YouTube video.

      Daniel asserts that it creates a “shadow copy of the original key.” However, as far as I understand, it can only unlock the car but not start it. Nonetheless, this still presents clear security threats, even if a thief cannot drive off with your vehicle (at least for now). “Some cars, like Kias, are not using any protection at all, which makes it easy to unlock them,” Derrow mentioned in an email. “For other brands, you have to know the source code to gain access.”

      For a more in-depth explanation of how Flipper Zero hacks operate, you should read the complete report by 404 Media. If you have any interest in this topic, it’s definitely worth a read. The key takeaway is that many of the world’s most popular vehicles are largely defenseless against these hacks, and it seems only a matter of time before thieves can do more than just access them.

      Have a tip or question for the author? Reach out directly: [email protected]