Digital Underground: Hacking Cars with Flipper Zero Exploits

Digital Underground: Hacking Cars with Flipper Zero Exploits

The Flipper Zero has emerged as a significant player in the hacking landscape since its launch in 2020. Marketed as a “multi-tool” device, it has gained a reputation as a handy accessory for hackers. However, recent reports shed light on troubling uses of the device, raising concerns that it simplifies illicit activities.

According to 404 Media, the Flipper Zero has found its way into the digital underground, where low-level hackers are customizing it to enhance its functionality. A hacker known as “Daniel” has been at the forefront, selling patches that enable the Flipper to unlock cars. Transactions for these modifications occur via cryptocurrency, with one version priced at around $600, granting access to the latest software, and a premium option at $1,000 for future upgrades and support. Daniel admits to having sold his software to approximately 150 users and acknowledges the potential for misuse: “Maybe someone is using it to steal from cars or steal cars.”

With simple software alterations, aspiring car thieves seemingly have numerous options at their disposal. Daniel’s patches reportedly support a wide array of car brands, with a PDF circulating that details nearly 200 vehicle models affected, including many 2025 models and well-known brands like Subaru, Ford, and Audi.

As noted by 404, Daniel shared a document listing the specific vehicles his patches can target. The list includes popular brands such as Peugeot, Citroën, and Volkswagen, with ongoing developments for Honda.

Daniel actively promotes his software on platforms like YouTube, stating that he has incorporated safeguards to prevent users from exploiting his software without compensation. Nevertheless, 404 reports that these safeguards are being bypassed, leading to unauthorized and free distribution of his creations.

Flipper Devices, the company behind the Flipper Zero, maintains that it is not responsible for the misuse of their product. In a statement to 404, they expressed, “We are not aware of any officially confirmed cases of theft using a Flipper Zero.” They emphasized that third-party software is often used to expose vulnerabilities in vehicles and urged car manufacturers to enhance security measures swiftly. Flipper’s position emphasizes the need for better corporate security practices across the industry.

In a statement provided to Gizmodo, Flipper remarked, “Flipper Zero is primarily a multipurpose tool for security researchers to test and responsibly demonstrate vulnerabilities. Malicious actors typically rely on different devices and methods, many of which are openly sold online.” They pointed out that the real challenge lies in how some automakers still ship cars with outdated security systems, perpetuating vulnerabilities regardless of tools used.

Authorities have voiced concerns about the Flipper’s role in facilitating vehicle theft. Last February, the Canadian government attempted to ban it, citing its connection to devices that replicate wireless signals for keyless entries. Flipper’s developers argued that they were unfairly blamed for broader issues with car theft. The COO of Flipper Devices, Alex Kulagin, highlighted that many other products marketed as car entry devices exist online. This led to Canada reconsidering their ban.

What types of vehicles can the Flipper Zero unlock? The patches targeting the Flipper Zero allegedly work on a vast number of vehicles, including nearly 200 different models across various brands.

Could the Flipper Zero be banned in other countries? While some nations have raised concerns, the continued debate on security tools suggests that outright bans may not be a straightforward solution.

What are cryptocurrency payments’ role in the underground market for Flipper software? These transactions allow anonymity and have contributed to the proliferation of these illicit software patches.

Is the Flipper Zero just a hacking device? While it is marketed as a multi-functional tool for security research, its misuse raises significant ethical concerns for users and manufacturers alike.

In conclusion, the Flipper Zero sits at the intersection of innovative security tools and potential misuse. If you’re intrigued by cyber security or the implications of emerging technologies, continue exploring related topics at Moyens I/O.