News for hackers. Stuff that matters.

A comment on Honda's global operations hit by cyber-attack.

Re:Honda's global operations hit by cyber-attack by pixxel on Tuesday June 09, 2020 @01:20PM (#23468611)
> "Honda can confirm that a cyber-attack has taken place on the Honda network," the Japanese car-maker said in a statement. It added that the problem was affecting its ability to access its computer servers, use email and otherwise make use of its internal systems. "There is also an impact on production systems outside of Japan," it added.

The article suggests ransomware.

[ Parent | on HN ]
Re:Honda's global operations hit by cyber-attack by MrFoof on Tuesday June 09, 2020 @01:45PM (#23468884)
It is ransomware, and I believe the word is it's the Ekans ransomware which specifically targets industrial machinery and control systems. This would've targeted the Honda America Manufacturing network in the United States, as where as anywhere else that has since been affected.

People have been sent home from some factories in the US.

https://jalopnik.com/honda-seems-to-be-the-victim-of-a-ranso...

[ Parent | on HN ]
Re:Honda's global operations hit by cyber-attack by syshum on Tuesday June 09, 2020 @08:37PM (#23472622)
It was EKANS Ransomware targeting one of thier network specifically

"the ransomware tries to resolve the "mds.honda.com" domain, and failing to do so, will terminate the ransomware without encrypting any files.""

https://www.bleepingcomputer.com/news/security/honda-investi...

[ Parent | on HN ]
Re:Honda's global operations hit by cyber-attack by joncrane on Tuesday June 09, 2020 @01:47PM (#23468896)
Specifically the Ekans ransomware, which apparently targets industrial control systems.
[ Parent | on HN ]
Re:Honda's global operations hit by cyber-attack by jcun4128 on Tuesday June 09, 2020 @01:46PM (#23468891)
> on the Honda network

Is that saying it was internal eg. someone plugged in a USB/executed code in person... hmm

article said possible downloaded "booby-trapped files"

[ Parent | on HN ]
Re:Honda's global operations hit by cyber-attack by eswat on Tuesday June 09, 2020 @02:29PM (#23469270)
> article said possible downloaded "booby-trapped files"

They gave that as a general example, not for this attack specifically. The article doesn't rule out an attack originating from outside the network (ie: phishing).

[ Parent | on HN ]