A Digital Underground Is Using the Flipper Zero to Break Into Cars

The Flipper Zero, a device touted as a "multi-tool" by its creators, has been gaining notoriety in the digital underground for its alleged role in facilitating car theft. Since its introduction in 2020, the device has been used by low-level hackers to create and sell custom software that can unlock cars with relative ease.

The proliferation of the Flipper Zero's custom software has raised concerns among law enforcement agencies and security experts, who argue that it makes nefarious hacking just a little too easy. The device's creators claim that it is primarily a tool for security researchers to test and demonstrate vulnerabilities, but critics argue that its widespread use by hackers and thieves has blurred the lines between legitimate and malicious activity.

One hacker, going by the moniker "Daniel," has been selling patches for the Flipper Zero that can turn the device into a car-unlocking tool. Daniel's software is sold with cryptocurrency, and customers can purchase either a basic version worth $600 or an upgraded tier costing $1,000, which includes access to future upgrades and support.

"Maybe someone is using it to steal from cars or steal cars," Daniel told 404 Media, highlighting the potential risks associated with the device. His software patches allegedly work on nearly 200 specific models of vehicles, including many 2025 versions, such as Subaru, Fiat, Ford, Mitsubishi, Suzuki, Peugeot, Citroën, Volkswagen, Skoda, and Audi.

However, Daniel's attempts to protect his software have been met with failure. Despite instituting guardrails to prevent users from "cracking" his software without paying him, 404 Media reports that the software has been cracked, allowing for its free distribution and potentially exacerbating the problem.

The Response from Flipper Devices

Flipper Devices, the company behind the Flipper Zero, has responded to the allegations by stating that it is "not aware of any officially confirmed cases of theft using a Flipper Zero." In a statement shared with 404 Media, the company claimed that the device's users are often malicious actors who rely on different devices and methods, many of which are openly sold online.

"Flipper Zero is primarily a multipurpose tool for security researchers to test and responsibly demonstrate vulnerabilities," the statement continued. "Malicious actors typically rely on different devices and methods, many of which are openly sold online. Ultimately, the real issue lies in how some car manufacturers continue to ship systems with outdated security models. Until companies take security more seriously and roll out regular updates, these vulnerabilities will persist regardless of the tool used."

The Controversy Surrounds the Flipper Zero

Authorities have long accused the Flipper Zero of aiding and abetting car thieves. In February of last year, the Canadian government moved to ban the device, along with other "devices used to steal vehicles by copying the wireless signals for remote keyless entry." However, the company's developers argued that they were being unfairly scapegoated as the hacker boogeymen behind the nation's car theft problem.

Canada subsequently walked back the ban, but the controversy surrounding the Flipper Zero remains. As the digital underground continues to adapt and evolve, it will be interesting to see how law enforcement agencies and security experts respond to this emerging threat.

The Real Issue at Hand

"The real issue lies in how some car manufacturers continue to ship systems with outdated security models," said Alex Kulagin, COO of Flipper Devices. This statement highlights the larger problem that the Flipper Zero's existence is a symptom of – the lack of attention paid to security by the automotive industry.

"We hope car manufacturers will take the security of their products more seriously and patch them up immediately," Kulagin added. "Carjackers have access to extremely sophisticated black market tools, and until companies take security more seriously, these vulnerabilities will persist regardless of the tool used."