Millions of cars vulnerable to hacking via hidden dealer-installed alarms

A security flaw in a device installed by car dealerships across the United States has left millions of vehicles vulnerable to remote hacking, researchers have warned. The device, an aftermarket alarm system, can be exploited to unlock doors, track locations, and even disable engines, posing a serious risk to drivers.

The affected devices were installed by dealerships in millions of vehicles, often without the buyer's knowledge or consent, and were left in place even when customers declined the alarm service. This means a vast number of cars on the road today carry a hidden vulnerability that could be exploited by malicious actors.

Researchers from a cybersecurity firm discovered the flaw and reported that it allows attackers to remotely access the device via a cellular network, bypassing security measures. The implications are significant: hackers could not only steal vehicles but also stalk drivers by tracking their movements or immobilize cars in dangerous situations.

The vulnerability affects a specific model of alarm system, which was installed in vehicles across the country over several years. The researchers have not disclosed the exact number of affected cars, but they estimate it could be in the millions. They have notified the manufacturer, which has released a patch to fix the flaw.

Dealerships are now being urged to apply the patch to all vehicles that still have the device installed. Owners are advised to contact their dealership to ensure the update is performed. The researchers emphasized that the fix is critical, as the flaw could be exploited remotely without any physical access to the vehicle.

This discovery highlights broader concerns about the security of connected car systems. As vehicles become more reliant on software and internet connectivity, the potential for remote attacks grows. The researchers recommend that automakers and dealers prioritize cybersecurity in aftermarket installations to prevent similar vulnerabilities in the future.