What the hell!

[pa-fatboy]

Anyone have this happen to them with the Ford app.
bought my kid a Ranger. And someone requested access to the truck.
my only guess is he posted on social media. Someone got the app and located the dealer via location services. Found the truck on the website and got the vin off of that. He declined access by the way. LOL

I’m not sure this qualifies as a hack just yet. It is phishing. Anyone could register the Ford App with a false name, walk by and scan a VIN into the application to begin the registration process. It needn’t be going to the dealers web page and pulling up location services or obtaining the vehicles vin number from the Window Sticker or other methods.

What happens if a vin is not registered to someone? Does it let the first person to scan it be the owner?

I think the Ford App did what it was designed to and protected the OP’s son from being hacked. It’s just like that with the phishing emails and phone calls asking for sensitive info.

It’s great that they were on their toes and didn’t blindly agree.

The one point I am wondering about is the Ford App accepting the request for access and asking the registered person if that was okay. IMHO, the registered owner should have to send an invitation to someone. The request should be able to specify what functions they have access to.

Sponsored

 

[dmeyer302]

I think the Ford App did what it was designed to and protected the OP’s son from being hacked. It’s just like that with the phishing emails and phone calls asking for sensitive info.

Agree: the system worked as intended and nobody has unauthorized access to the truck. So what’s the problem?

 

[NOVA_Ranger]

Russians, definitely.

 

[thewhiteranger]

That is one lucky kid! It seems like its working as designed because it asked him to approve the request before giving access....... still a little creepy. I am hoping that ford does a good job at keeping it secure but if someone wants the truck that bad, there is no way to stop them --- I did turn off the location on the truck but use the rest of the features...
Good luck with the new truck!! only 1200 miles into mine but so far, I love it.

 

[Gizmokid2005]

[...]
What happens if a vin is not registered to someone? Does it let the first person to scan it be the owner?
[...]

No. In order to register a truck you need to double-confirm from within the truck itself in order to complete registration.

You're probably spot on though, this was likely some kind of phishing/walk-by scam attempt and nothing more.

 

[lohchief]

Never registered with Ford Pass!! WAY to many "lost privacy issues " in the fine print!!!!

I deleted my ford pass. Don't need it,don't want it. It's bad enough the truck tracks your every move...

 

[South Florida Ranger]

I’m not sure this qualifies as a hack just yet. It is phishing. Anyone could register the Ford App with a false name, walk by and scan a VIN into the application to begin the registration process. It needn’t be going to the dealers web page and pulling up location services or obtaining the vehicles vin number from the Window Sticker or other methods.

What happens if a vin is not registered to someone? Does it let the first person to scan it be the owner?

I think the Ford App did what it was designed to and protected the OP’s son from being hacked. It’s just like that with the phishing emails and phone calls asking for sensitive info.

It’s great that they were on their toes and didn’t blindly agree.

The one point I am wondering about is the Ford App accepting the request for access and asking the registered person if that was okay. IMHO, the registered owner should have to send an invitation to someone. The request should be able to specify what functions they have access to.

True. It just happenned so quick after the IG post. Without the geo tag would been hard to get the vin. Trucks been in my driveway

 

[Scoopo]

I'd bet someone just fat-fingered their own VIN
More oops than malicious.
Just a thought.

 

[Hardy12000]

I'd bet someone just fat-fingered their own VIN
More oops than malicious.
Just a thought.

More than likely this. I used the vin off the dealer website when I bought mine, and it wasn't the correct one, could've been something like that too

 

[CO2Ranger]

Anyone have this happen to them with the Ford app.
bought my kid a Ranger. And someone requested access to the truck.
my only guess is he posted on social media. Someone got the app and located the dealer via location services. Found the truck on the website and got the vin off of that. He declined access by the way. LOL

Stupid question, but was it used?

 

[South Florida Ranger]

Stupid question, but was it used?

No. Brand new. They must have pulled the vin off the Internet ad before it was taken down.

Sponsored