Hijackers no longer break locks: how hackers steal cars remotely
Electronic locks, “rods” and locking the car through the application. How to protect your car from digital attackers and whether insurance will cover such risks.

Forget about breaking locks and broken windows. Modern hijackers work in a new way. Electronic systems, mobile applications and connected services, which should make the life of the driver more convenient, opened up new opportunities for hackers.
According to Rosgosstrakh experts, electronic devices for stealing cars have become common practice. Criminals use “rods” – special repeaters that intercept the signal of the electronic key. The machine "thinks" that the owner is nearby, and calmly opens without a single scratch.
In the summer of 2026, Kaspersky Lab recorded malware for Android, which was installed through an update of multimedia systems. Hackers collected technical data and used the car for fraudulent advertising.
Will CASCO cover remote theft? The good news is that insurers don’t care how the car was stolen. The main thing is that the contract stipulates the risk of theft or theft. “If the car is recognized as stolen by the police, and the risk is spelled out in the contract, the insurer will pay compensation regardless of the method of theft,” the company said.
An even more alarming trend is digital extortion. Fraudsters hack into owners’ accounts and block control of the car: from screens and climate control to the engine. Then they demand money to unlock.
A standard CASCO does not usually cover the costs of recovering from a digital attack, such as software flashing or evacuation. However, some companies already offer additional options. "Rosgosstrakh" allows you to include in the contract "protection of electronic control of the vehicle", which covers unlocking cars and repairing electronics. VSK and “Consent” believe that a separate insurance against digital extortion is not yet necessary, since such attacks have not yet become mass.
What should a car owner do? Update the car software only through official channels, use two-factor authentication in applications and check with the insurer what digital risks your policy covers.



