January 1, 2005
WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.
January 1, 2008
WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.
January 1, 2010
WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.
January 1, 2012
WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.
August 1, 2005
The Zotob worm 13 shuts down US auto plants. Despite having professionally installed firewalls separating the Internet, the company network and the control network, the Zotob worm had made its way into the control system (probably via a laptop). Once in the control system, it was able to travel from plant to plant in seconds. Approximately 50,000 assembly line workers had to cease work during the outages.
February 13, 2021
DoppelPaymer gang wants $20 million from Kia Motors America (KMA) for a decryptor or else it will leak data it stole from the California-based subsidiary of the South Korean-based auto giant.
Kia Motors America was hit by an attack nationwide on Saturday through its IT enterprise affecting their mobile UVO Link apps, phone services, payment systems, owner’s portal, and internal sites used by dealerships, according to a report in Bleeping Computer.
Irvine, CA-based KMA has nearly 800 dealers in the USA with cars and SUVs manufactured out of West Point, Georgia. When visiting their sites, users are met with a message saying Kia is “experiencing an IT service outage that has impacted some internal networks.”
March 1, 2020
A precision parts maker for space and defense contractors has confirmed a “cybersecurity incident,” which TechCrunch has learned was likely caused by ransomware. Visser Precision, a Denver, Colorado-based manufacturer, makes custom parts for a number of industries, including automotive and aeronautics. In a brief statement, the company confirmed it was “the recent target of a criminal cybersecurity incident, including access to or theft of data.”
June 9, 2020
A ransomware attack took down portions of Honda Motor Co. this week, locking up systems and halting vital manufacturing operations in several countries.
May 18, 2019
Production lines had stopped at some of its 170 plants.
The ransomware LockerGoga blocked the company’s systems, forcing a switch to manual operations and workarounds. The Extruded Solutions unit, which makes components for car manufacturing, construction and other industries, reduced its output by 50%. Administrative systems, such as reporting, billing and invoicing, suffered delays. It took Norsk Hydro several weeks to bring operations back to normal.