Used Ford models with aftermarket KARR alarms vulnerable to Bluetooth hacking

Security researchers at the University of California San Diego have uncovered a major vulnerability affecting over two million used Ford vehicles across the U.S. equipped with aftermarket KARR Security Systems. The flaw allows hackers to remotely access the alarm system via Bluetooth, enabling them to unlock doors, disable the alarm, flash lights, honk the horn, or even cut the ignition. The KARR systems were primarily installed by dealers to deter theft while vehicles sat on their lots, and many were never removed after sale, leaving owners unaware of the security risk. Acrisure Protection Group, the manufacturer of the KARR system, has released a firmware update to patch the vulnerability. Owners with the KARR smartphone app have already received notifications about the update. For those unsure whether their vehicle is affected, indicators include a KARR sticker on the driver-side window, a “SWDS” (SouthWest Dealer Services) sticker, or a blinking light under the dashboard. The discovery highlights the growing risks posed by aftermarket connected systems in older vehicles, where security updates may not be top of mind for owners.