Ransomware attacks against ICS vendors

Guest post from the ICS cyber security blog:
Ransomware attacks against ICS vendors

25 March 2021 – icscybersec

Within two days, 2 major ICS vendors, Canadian Sierra Wireless and US Honeywell, were hit by ransomware attacks, according to news reports.

According to a statement from Sierra Wireless, the incident affected parts of their IT systems, including the systems that serve the company’s web presence, but the statement also says that production lines were also shut down as a result of the incident.

Sierra Wireless staff are now reported to have successfully overcome the malware attack and claim that the incident only affected the company’s internal systems and not the products and services available to their customers.

According to the manufacturing giant, the ransomware attack on Honeywell only caused disruption to the operation of a “limited number” of their IT systems and that the attackers were unable to obtain customer data.

This news, combined with ransomware attacks against other industrial players that have become public in recent weeks, shows increasingly clearly that industrial companies that rely on various automation systems are also the focus of cybercriminals or other attack groups. The question is: how long will their luck hold out – or rather, who will wise up in time?

***

The original guest post was published on the ICS cyber security blog.

Translated by DeepL.