Cars Australia

tl:dw for others: It's key programming via an easily accessed OBD port. Pop the window, plug in, program yourself some new 'keys', then go.

The tools used have legitimate purpose. Thieves like this do nothing except make manufacturers lock their shit down even more, putting DIY mechanics in a tighter spot.

Kia/Hyundai had a similar-but-worse problem in the states, that I think they resolved by software update - cutting access to the attack vector after a certain amount of idle time. Their fault entirely though for selling cars without even basic immobilisers. Check me on that, memory not what it used to be.

Moving the port or putting a hidden switch in to disable/enable it are viable options for concerned owners. Alternatively you could put a hidden killswitch on the fuel pump or starter (for ICE cars at least). Might not save your window, but at least the thief will likely abandon the attempt if it's taking too long to find and undo the changes. This attack completely relies on speed to be effective.