Kia EV6 Gone in 60 seconds? If you have a Kia EV6 or Hyundai Ioniq 5 you need to see this

Following on from my anti-theft video from earlier this year,this video builds on that & provides
9 tips to help protect your Kia EV6 or Hyundai Ioniq 5 from being stolen.
Most of the protective measures in this video will also work for non Electric Hyundai Group Cars.
Note added 10/01/2024 *****
Now to disable keyless - • How to Disable Keyless...
Are Ghost immobilisers Thatcham approved? The answer is no. But they are approved by TASSA, a leading body in aftermarket vehicle security.
From the comments from Chris Ruddick:-
Ghost 2 immobilisers are not thatcham approved, they are TASSA which some insurers will accept and or recognise the Ghost. Others simply wont accept it because of the lack of thatcham approval.
There has been some cases of some seeing premium increases with insurers if one is fitted.
End Note ******
You can support this channel by liking,subscribing & giving Superthanks or using my referral codes.
My Octopus referral code:-
Share £100
Use this link to sign up to Octopus - share.octopus.energy/rose-gec...
My Octopus Electroverse Charge Card referral code. Share £10:-
electroverse.octopus.energy/s...
Links
SpeakEV EV6 thread that sparked this video :-
www.speakev.com/threads/ev6-s...
Kiaowners.co.uk thread on Car thefts:-
www.kiaownersclub.co.uk/threa...
Related Reddits:-
www.reddit.com/r/KiaEV6/comme...
Ioniq 5 Owners Reddit on thefts:-
/ increase_in_ioniq_5_th...
PC Gamer story:-
www.pcgamer.com/uk-thieves-ja...
Amazon UK Faraday Box Link(I have very similar one):-
www.amazon.co.uk/Todoxi-Farad...
Amazon UK Stoplock Elite Pro (I have one of these):-
www.amazon.co.uk/dp/B06XP21DK...
Amazon UK Disklok - please check it will fit your vehicle. This just an example:-
www.amazon.co.uk/Disklok-Stee...
Amazon UK 12v remote disconnect. In theory this should work. Not tested:-
www.amazon.co.uk/GEARZAAR-Dis...
Ghost Immobilisor you may have to find local link:-
ghostinstallations.co.uk/ghos...
Amazon UK link to OBD Port Lock. May work. Not tested:-
www.amazon.co.uk/Protector-An...
Amazon UK link to single Apple Air Tag:-
www.amazon.co.uk/Apple-AirTag...
Chapters
00:00 Titles
00:08 Introduction
00:24 Even more EV6 & Ioniq 5 thefts! what is going on?
00:45 Gameboy device?
01:05 These thefts are not via the relay attack method
02:00 These are my 9 tips to help protect your car
02:06 Valet Mode
02:18 How to set Valet Mode
02:42 Faraday Box
02:58 Stocklock/Disklok
03:10 Immobiliser
03:29 Turn off approach unlock
03:45 How to turn off approach unlock in the menus
04:56 Fuse Removal
05:10 Protect your OBD
05:23 Airtags
05:40 Make a record of your Kia Connect IMEI this os how
06:29 Endscreen

[@christopherruddick88]

Ghost 2 immobilisers are not thatcham approved, they are TASSA which some insurers will accept and or recognise the Ghost. Others simply wont accept it because of the lack of thatcham approval. There has been some cases of some seeing premium increases with insurers if one is fitted.

[@dablet]

there are 2 immobilizers on the market: Ghost and Starline. both same price at around $500. any idea why they are not available in USA?

[@jm9371]

Great video. I have a 2023 EV6 and have done a few of these things. I will now disable all the approach unlocks as I do not mind pressing a button in my pocket to access my car. I have TWO Apple air tags in my car. One is in a fairly easy to find location if searched. This serves to be located once the thieves are alerted that there is an air tag inside the vehicle. I have removed the audible speaker from the second tag and secured it with two sided tape to a location that will be very hard to locate.

[@evodessey]

Top Airtagging👍

[@darrenaitcheson795]

I think the answer to your closing question, Brian, is "because they're utterly clueless when it comes to software".

[@chicomiguel]

Very useful tips! Thanks Brian!

[@stephenclay6852]

Good advice. I do agree with your last comment pin to drive. Which is basically what ghost secretary is .

[@ronexus]

Very complete👌 Also waiting for my e-Niro dealer in Germany to provide a statement and suggestions.

[@stevem1863]

As someone who has been the victim of this 'gameboy' theft I'd encourage other owners to take all these steps. Especially the Ghost immobiliser. The thieves were in my car and away in under 10s. As far as I can determine the 'gameboy' works by intercepting a signal from the car when an attempt is made to open the locked door from the outside. It then decodes the key and from that point on acts as a genuine key. I'm not sure that OBD port access is required to start the car as from the car's perspective a valid key is in the car. Don't expect any help from Kia at all, they were completely useless. Even the police could not get a response from them. This is a serious vulnerability that appears to have been known about for over 12 months and as far as I can see neither Kia or Hyundai have done anything about it.

[@johniooi3954]

Thanks for the advice.

[@reymartinreymartin]

Thanks for this video, I'm definitely not an expert but looking at the 'gameboy video' it doesn't seem to be relay attack. I agree bruteforce attact is likely, who knows Kia/Hyundai probably just have a handful of combinations. Hopefully more technical facts of the attack comes to the surface so we can protect our cars a bit better.

[@aivnv]

Instead of Valet mode, you can also lock the driver profile with a pin. This way you don't need to manually enter the pin each time you leave the car (assuming this is what you have to do to enable Valet mode - I haven't tried it yet, maybe it remembers the pin?). You can still drive the car if the driver profile is locked and the rear-view camera works if you switch to R, but at least Kia Connect/BlueLink can't be disabled as easily. The option should be somewhere under Settings - Profile - your driver profile. Also important to mention, this setting is per driver profile, but so is Kia Connect/BlueLink. I tried to switch to the second driver profile without unlocking the main one and I was able to set it up and use it without pin, but BlueLink was not connected to it and couldn't be disabled from the menu without first switching to the main profile using the pin to unlock it.

[@evodessey]

Cheers I'm aware of that.Last time I tried it nearly 2 years ago I found a way around it. Will have to revisit

[@v1nnyc]

A pin before you can drive off would be the easies way by far and prob the least hassle. Make sure you wipe your touch screen down though as it may get a bit obvious

[@evodessey]

Cheers. Yes i do but i could have added that as number 10🤦

[@yu.niverse]

Teslas pin to drive varies the location of the pin pad each time so that you dont leave a consistent pattern.

[@dablet]

Hyundai n some other car companies dont care. they actually think i would buy the same car again if mine is stolen. shame on them! i will definitely look for PIN to drive now that i know such option exists

[@evodessey]

@dablet that's what Hyundai group should implement

[@Panorama-memory]

@dablet no one steals cars in Korea. I sometimes see cars that are not even locked in my apartment's underground parking lot, and even the car key is just in the car. Because no one steals it. In Korea, when you go to convenience stores, highway rest areas, and toilets on the side of the road, just go in driving mode. Nobody thinks of stealing. What kind of security are you living in?

[@cmdrsabre]

Happend to me in November. My Ioniq 5 (only 3 weeks old) was stolen in seconds. No relay attack. I noticed by the push notification, that me remote app account was disabled. I now have extra security in my new one. Like a steeringwheel lock, but also other precautions to slow them down. But I don't want to give them away in public.

[@iceman95590]

Hi Brian very interesting, I noticed the location said Burntwood, UK. Is this the one near Cannock ?, my in-laws live there and I will be getting my Ioniq 5 next week, I live in Devon but will be spending a lot of time there. Thanks for the info.

[@evodessey]

Yes we are halfway between Lichfield and Cannock, Acorn Kia is my dealer, walking distance from my house,enjoy the Ioniq 5

[@AdalbertoCaccia]

Hello, thanks for your video, my 2022 EV6 is gone already, I think with the GameBoy-type device, as they've stolen it 100% unnoticed at 10pm in front of my window! However, the nice part is that many of your hints will be as well easy adoptable also in my new MG4 Extended Range 77KWh, which hopefully will cost me half of the EV6.

[@evodessey]

Yes I know. I posted on your thread on EVforums. I wish Kia & Hyundai would do something about it.

[@mikes6853]

I got LoJack so not worried

[@tonymiller4375]

Hi, im following your advice on closing off all the welcome approach stuff for the car. I cant seem to get rid of the welcome lights. I have a ev6 gt2023. Help please

[@evodessey]

Setup-Settings->Vehicle->Light->Welcome mirror/light On driver approach is the only setting i know of that would affect this.

[@Cueba11UK]

@evodessey Hi Brian, have you seen Challenge the Road ('s) video here on YT about the numbers of EV's stolen over the last few years. I know it's not good to have even one stolen but the figures I found quite eye-opening. Well worth a watch I reckon

[@evodessey]

No i’ve not. I will take a look.Cheers

[@joechambers9382]

Hi Brian, I recently Test drove the BYD Seal and was very impressed with it and I'm now considering trading in my EV6 for it, I'd like to hear your opinion on this -------- Regards Joe

[@evodessey]

It does not charge as fast on AC or DC. The touch screen swivel is a gimmick.Seems to be a distinct lack of physical buttons. I’m not a fan of binnacles that are smaller than the Nav screen having gotten used to the Kia ones in 2 cars. It’s got a lot going for it besides that though, I prefer the EV6 looks to it. And alsp prefer the tailgate. Just spotted that a Mercedes dealer in Tamworth has swapped to BYD. May give it a test drive.

[@itsmyview2024]

metal biscuit tin with a wire soldered from the lid to the can works 100% as a faraday cage and you get to eat the biscuits, a metal tea caddy works as well

[@evodessey]

I used to keep them in an old metal tea caddy but that started to leak signal so i swapped.

[@samteknic]

As does a cocktail shaker

[@berndadam8703]

You forgto one method: disable the door button, therefore the gameboy attack cannot be done. Close the car, push both buttons (open and close) for 5 seconds, and than the buttons are off (wash street mode). I use this together with the shield of the key (and I can tell you it work longer than you describe).

[@evodessey]

I only realised how to do that after i made the video. Manual does not describe the function as disable keyless. I made a video after this one here kzbin.info/www/bejne/laebgoR3mt2sf68

[@berndadam8703]

I would like to install a gas cartouche with CO2 or other gases. So that thieves can't steal the vehicle. The only question is, if they die, who is responsible? A sign on the outside could help, but then the gas will lose its effect. They will leave the doors and windows open for longer and the gas will evaporate. It's best to just install the sign and hope that it helps. e.g: Attention inert gas, opening the car is life-threatening! Do you think this is a viable way of protection?? The Key pouch Is working okish, only the mirror moves, the door stay closed.

[@denhaagtrader8781]

Does hyuandai have a security update for this as yet??

[@evodessey]

No

[@denhaagtrader8781]

@@evodessey formal complaint coming then

[@choshun8]

If the car allows the use of your phone as a key would that be safer(so you can keep your physical key in a faraday cage at home). Don’t know exactly how they work but assume it cycles codes unless a relay can be used on your phone too

[@evodessey]

Maybe but in UK only Genesis GV60 and EV9 have the digital key option in Electric Vehicles at the moment

[@choshun8]

@@evodessey what about disabling keyless entry and using key button to unlock. Would this stop the key from continually transmitting a signal? Or obviously fit an immobiliser

[@Leo-qc4wv]

For me, it means working with a lawyer to get Kia to buy the car back. And that's for the price that Kia specifies as MSRP and then minus the kilometers driven. The whole Kia Hyundai Genesis group doesn't learn any other way

[@VerticalBlank]

4:25 I get the value of not indicating that the car is unlocked, but don't the hazards always flash and the handles always tip out? Genuine question.

[@evodessey]

There are 2 types of signal coming from the EV6 car key. Short range proximity signal which triggers the approach unlock (or car is listening, i don’t know for sure) and the main one which is long range when you press the button to open/close doors manually. The suspicion from what i’ve read is it’s the short range system that has been compromised.

[@VerticalBlank]

@@evodessey Thank you, that would reinforce turning off unlock on approach and smart boot open, but keeping on the lights upon unlock for personal safety etc

[@evodessey]

I probably got carried away😂

[@VerticalBlank]

@@evodessey fair 🙂

[@mad4tar77]

Doesn't the key go to sleep and stop transmitting when it isn't moved for a period of time? This would remove the option of relay theft whilst you sleep.

[@evodessey]

Yes it is supposed to. And it would help prevent relay theft but i would take no chances.

[@mad4tar77]

@evodessey Yeah, I think I'll buy a faraday box. I put a Dislok on every night and put it in Valet mode, in addition I have 2 Samsung Smart Tags hidden in my car. (I suffered two theft attempts, both between 3am and 4am, to break into my house for the keys, thankfully i had recently done a refurb on my home and upgraded all windows and doors and the thieves couldn't get in, woke me both times hammering, world's dumbest thieves, still not a nice experience though). "Gameboy" attacks seem to be the favoured method now with criminal gangs. Given that the gameboy device works by decoding the response from the car when the button is pressed on the driver's door, if keyless entry is turned off does this mean that the car sends no signal for the gameboy device to decode?

[@evodessey]

That's a good question but if you have approach unlock turned on it's obvious that the car is open. I don't know enough at this stage about how the Gameboy device works at this stage. Others suggested in comments to previous video that it was good idea. I was skeptical at first but if it helps defeat them then I say why not.

[@mad4tar77]

@evodessey I just tried this (slow day in the home office on the Christmas run in today!). I turned off approach unlock, however, unfortunately this did not deactivate the button on the door, therefore I can't see a way of completely deactivating keyless entry on the EV6 meaning the car will always transmit a code for the Gameboy device to decode when the thief presses the button on the door. Looks like the EV6 is more vulnerable to the Gameboy attack than my previous car, where keyless could be disabled completely.

[@prevailz1]

Wouldn't odb still bypass pin?

[@evodessey]

Not if the software is the cars ECU's is designed correctly

[@leeatherton9664]

Surely adding a Ghost 2 would stop this happening? I get my GT next week, I think I’m going to opt for this.

[@evodessey]

Yes. i do mention Ghost Immobiliser in the Immobiliser section. Quite a few viewers of my previous video have this.

[@alanworkman6425]

10. Kia/Hyundai could speak nicely to Tesla to find how they protect their cars pretty successfully looking at the insurance data 🧐

[@Carrman2020]

Just for a bit of feedback; my Faraday bag is still working after six months. I have AirTags secreted about the car as well….. What is the benefit of the valet mode apart from the ability to track the vehicle? In addition, whilst I accept that Tesla security is good - the downside is you have to own a Tesla ….😢

[@evodessey]

You are lucky with the Faraday bag. My wife’s proximity key works with the bag closed on her Zoe. We keep it in there to protect the key from scratches which is credit card sized. Valet mode stops Kia Connect from being disabled and is supposed to limit speed and send alerts when conditions are met. Some of these things just don’t work though.

[@bentaxelrod]

As I understand it, it is mandatory for all new cars sold in Australia to have an immobiliser. Let me know if you think this is wrong.

[@evodessey]

They do here in the UK but if the car goes into a workshop/bodyshop/valet cleaner where someone criminal unknown can create a new spare key then that makes no difference.

[@bentaxelrod]

Ahhh, I see. And it’s against a crook’s core beliefs to get a descent job.

[@mandismith89]

a partial wheel stoplock is pointless, they just cut the steering wheel :)

[@energitrimmeren]

Thanks for the information. I won’t hesitate to contact the Danish car association FDM, in order to ask them to put pressure at KIA & Hyundai importers,🇩🇰😎

[@wobby1516]

Using an Airtag will work to some degree, but you’ll need to remove the speaker from it as that will notify the criminal to its whereabouts, there’s lots of videos on how to. My go to would be a steering lock as in your video as that’s seen from outside and hopefully the thief will move on to easier pickings.

[@evodessey]

@wobby1516 yes I saw those videos when I was researching my first video back in October

[@itsmyview2024]

remember to disable the airtag speaker or they may hear the beep ( I have read this may be illegal)

[@evodessey]

Good tip. I will have to get one to have a play.

[@VerticalBlank]

No idea about legality or otherwise of disabling the speaker, but it is worth stating that AirTags have an anti-stalking feature, to address the case where a malicious stalker plants one on your car etc. If you have either (a) any iPhone or (b) an Android phone with the necessary app installed, the phone will alert you if it notices an unauthorised AirTag that is "following you around." "Unauthorised" basically means "not registered to you or a trusted friend". So before too long the crims *might* get alerted to the hidden AirTag that way. Still it might give you enough time to track the car down. I think valet mode is the better option though, and costs nothing. That doesn't mean that putting an AirTag in your car isn't a worthwhile thing to do, and the AirTag can be useful in other ways because nowadays you can share its location with friends and family so that they can all see where the car is without setting up Kia Connect accounts for them, or worse sharing your Kia Connect login credentials.

[@dablet]

ghost immobilizers are not sold in USA. any idea why? im never buying a Hyundai again. the company has proven time and again that it does not care about security

[@evodessey]

Sorry I've no idea why.

[@evodessey]

Many manufacturers are vulnerable to keyless entry attacks,not just Hyundai Group. I only recently discovered a method to disable keyless. kzbin.info/www/bejne/laebgoR3mt2sf68

[@koaschten]

Why Kia doesn't do all that? Because selling more cars to replace stolen ones makes them money, fixing software costs them money.

[@evodessey]

Up to a point but if they don’t start fixing this sh*t then i for one will not buy another Hyundai Group Car. I’m sure i’m not alone in that.

[@Nosilla1961]

Won't the insurance companies refuse to insure these cars without stipulations?

[@evodessey]

@Nosilla1961 May well come to that😤

[@fambridge7886]

There is a video on KZbin about a chap at a car auction around Manchester. He is amazed at the number of 4x4 Range Rovers etc. He does mention they are getting too expensive to insure, due to being stolen!@@evodessey

[@VerticalBlank]

The scariest thing about this is that they seem to be basing this on a photo of the number plate! How is that even possible unless Kia/Hyundai somewhere have a database linking number plates to key codes that has somehow been compromised? I find that astonishing if true. And if it IS true, Kia/Hyundai should be immediately doing something about it or they will potentially be legally liable. If it isn't true, then it can only be a brute force, which again I would find breath-takingly incompetent by Kia/Hyundai. 1. Their car keys should be operating on a large number-space of public-private key pairs, 2^1024 would be standard at the moment. 2. The car should use a standard increasing-delay algorithm when it is getting spammed, doubling the time delay each time is standard. And at some point it should drop to "physical key only".

[@evodessey]

They may be just checking number plate on DVLA database to see what model they are taking.From the outside it’s difficult to tell a RWD from an AWD or they may have some database. I wish i knew more.

[@VerticalBlank]

@@evodessey Point taken about the DVLA database, so I looked up my own car. It doesn't give that level of detail, it doesn't even say that it's an EV6, just that it's a Kia and what colour it is. Have a look for yourself. So I think all of my above points stand, plus we have ruled out the DVLA. The crims need the reg num, and the only other database that could connect the reg num to the key codes are those owned by Kia/Hyundai At this point it's not hard to connect the dots: Kia/Hyundai maintain a database that links reg nums to key codes and it has been compromised.

[@evodessey]

DVLA mine is GT line S but yes very little detail on there.

[@evodessey]

Like you say,not enough information to identify RWD from AWD. Because these thefts seem around the London area i wonder if pocket computer device they are using has the ability to act like a spare key with the ability to store a database of keys. They may be gaining access to the car to log another key on via bad actors at dealerships or dodgy body repair shops or whatever. When the key is in the hands of a 3rd party they may be cloning the key then. The device then holds a database with cloned keys. All they need then is the number plate to fire the correct one at the car. So is that why they need number plate?

[@Rawprawned]

In Australia each state enables a govt plate search which returns the VIN. I saw a video some time ago re a device which could generate a key from the VIN..not sure how that works.

[@BillsCountrysideAdventures]

Pins are hacked, now fingerprint or retinal scanner you are talking. Stupid old tech.

[@evodessey]

EV9 has fingerprint scanner but will still fall back to pin. Of course they can be hacked but it’s better than nothing.

[@Digikidthevoiceofreason]

Fingerprint scanners are very easy to fool.

[@ipb1966]

I’m fairly sure Tesla, which has no physical key, is a lot more secure and combined with Pin To Drive makes Teslas almost theft proof. I was really disappointed coming from a Model 3 to a GV60 to see a huge physical key with a completely separate emergency key. Fortunately my current GV60 has Apple Digital Key, an NFC card and Face ID so don’t need to carry a key around.

[@gerardvanderhorst2066]

Do not assume anything. The Tesla was hacked within 2 minutes just this year. The researchers got a free Tesla and $100,000. The pin to drive feature will delay theft and the thieves will go to another easier to steal car.

[@jankaskyevitchjellbet7293]

Been doing research before deciding to buy ev. I like how Kia drives ioniq5 looks etc. However, Tesla is the best ev out there.

[@evodessey]

Tesla has some good tech. Kia has some good tech. Now if only it was all combined in the perfect car.

[@Digikidthevoiceofreason]

Not really. Tesla has better technology but that’s it. Their physical cars are not the best out there.