New cars including latest Mazda, Subaru and Vauxhall models are still vulnerable to keyless thefts as manufacturers are slammed for being slow to respond to the threat

New cars including the latest Mazda, Subaru and Vauxhall models are still vulnerable to keyless thefts, according to a new report.

The study by Thatcham Research assessed the security features of 13 new cars and found that some were still coming to market with vulnerabilities.

Manufacturers have been criticised for being slow to respond to the threat of relay attacks by thieves which has been blamed for a spike in car thefts in recent years, as reported by The Times.

Vehicles that have a keyless system employ a very simple process. The fobs emit a short-range 'friendly' radio signal that carries only a few yards.

When the associated vehicle is close by (usually within a few metres), the car recognises the signal and unlocks the doors. 

Thieves can intercept this by using an electrical relay system to gain immediate access to keyless cars.

The latest figures for England and Wales show that 114,656 vehicle thefts were reported in 2018-19, up by 52 per cent in five years. 

A number of manufacturers have now introduced a motion key sensor fob that goes to sleep when not being used.

This prevents thieves from manipulating the signal. But the report says that this does not go far enough and that the keyless vulnerability needs to be 'designed-out' of new vehicles completely.

The latest ratings showed that the BMW X6 M50d, BMW 218i Gran Coupe M Sport, Land Rover Discovery Sport D150, Mini EV, Porsche Taycan, Škoda Superb and Toyota Supra all gained 'superior' ratings.

The cars rated 'poor' were the Mazda CX-30, MG HS Excite T-GDI, Subaru Forester e-Boxer XE Premium and Vauxhall Corsa Ultimate Turbo 100.

Richard Billyeald, Chief Technical Officer, Thatcham Research comments, 'The keyless vulnerability continues to be a concern to car owners. However, it is not the only factor behind recent increases in vehicle theft.'

'Our assessment found that the rated Hyundai, MG and Tesla models are missing some commonly accepted security measures.

These measures were introduced to improve core car security and represent the minimum today's drivers should expect, whatever the vehicle price point.'

Any vehicle with keyless entry could be vulnerable to relay theft.

It is not illegal to sell or own a relay box device and the only way police can arrest someone is under the 'going equipped to steal' law — meaning they would have to catch the thief red-handed with it, or prove an intent to use it for theft.

The same law applies to other gadgets supposedly designed to help owners who have lost their keys, such as key programmer devices, which tell the car to trust a new key and forget the code for the original one.

But police sources, security experts and locksmiths specialising in vehicles have all said there is 'no legitimate reason' to be in possession of a relay device.

If a driver was to lose their key, a relay box wouldn't help them get back into their car, as the devices only work when the key is nearby.

Mr Billyeald added:  'The number of carmakers now offering Relay Attack counter-measures with new vehicles is steadily increasing and should be applauded.

'However, all new cars with keyless systems ought to have a solution to this long-standing vulnerability in place.'

'It's also important to remember that the motion-sensor fob, while a good short-term fix, is not the ultimate solution to the keyless vulnerability, which should be designed-out of new vehicles completely in the future.'


Best rated cars

  • BMW X6 M50d
  • BMW 218i Gran Coupe M Sport
  • Land Rover Discovery Sport D150
  • Mini EV
  • Porsche Taycan Turbo
  • Škoda Superb
  • Toyota Supra


Worst rated cars

  • Mazda CX-30
  • MG HS Excite T-GDI
  • Subaru Forester e-Boxer XE Premium
  • Vauxhall Corsa Ultimate Turbo 100