Skip to main content
Sister Publication Links
  • Automotive News
  • Automotive News Europe
  • Automotive News Mexico
  • Automotive News China
Subscribe
  • Subscribe
  • Newsletters
  • login
  • HOME
  • NEWS BY BRAND
    • Aston Martin
    • BMW
    • Daimler
    • Fiat Chrysler
    • Ford
    • General Motors
    • Honda
    • Hyundai
    • Mazda
    • Mitsubishi
    • Nissan
    • Subaru
    • Tata
    • Tesla
    • Toyota
    • Volkswagen
    • Volvo
    • Mini
    • Rolls Royce
    • Mercedes Benz
    • Smart
    • Alfa Romeo
    • Chrysler
    • Dodge
    • Ferrari
    • Fiat
    • Jeep
    • Lancia
    • Maserati
    • Ram
    • Lincoln
    • Buick
    • Cadillac
    • Chevrolet
    • GMC
    • Acura
    • Kia
    • Infiniti
    • Jaguar
    • Land Rover
    • Lexus
    • Audi
    • Bentley
    • Bugatti
    • Lamborghini
    • Porsche
  • News
    • Auto Shows
    • Photo Galleries
    • Automakers
    • Suppliers
    • Retail
    • Government Relations
    • Trade and Tariffs
    • Technology
    • Labour
    • Lawsuit challenges Trump's authority on steel, auto tariffs
      Automaker-supplier relationships take a hit
      Ghosn's ace for growth: Suppliers
      In-demand tech puts wary suppliers on guard, study finds
    • Ontario aims to replace GM with Magna, Martinrea or other in Oshawa
      FCA to idle Ontario minivan plant due to parts shortage
      Supplier Brose cutting 100 jobs in Ontario, report says
      Magna's Walker: Pair up to keep cars affordable
    • AutoCanada sues former CEO Patrick Priestner for $250M over dealership acquisitions
      Rolls-Royce names BMW exec its new sales VP for Americas
      How GM's Oshawa closure could affect sales, dealerships
      Commission sales seem to benefit few people, Ontario dealer association says
    • Level 3 autonomous vehicles now allowed on Ontario roads
      Ford adds 149,652 vehicles in Canada to Takata airbag recall
      Honda wants recall notices to be part of registration renewals
      All wet: Rain could delay the arrival of self-driving future
    • A look at which automakers in Canada meet USMCA's 75% content rule
      Canada seeks Pelosi's support in push to lift U.S. metal tariffs
      How Canada's auto industry can take advantage of new trade deals
      Canada says it will stay out of U.S. ratification fight over new NAFTA
    • Vehicle screens go super-sized at CES as tech catches up
      All in a day's work
      Ford commits US$4 billion to autonomous vehicles, forms new subsidiary
      Massive data breach at Canadian company hits several automakers, report says
    • GM Canada says it will find 2,400 jobs for Oshawa workers
      FCA to idle Ontario minivan plant for 8 days, union says
      Unifor calls for boycott of GM vehicles if automaker closes Oshawa plant
      Canada blindsided by GM Oshawa closure, workers walk out in protest
    • Toronto Auto Show
  • Opinion
    • Blogs
    • Chevy's 2019 Blazer: More Camaro, less Equinox
      Trump's troubling definition of victory
      The 2019 Nautilus: Lincoln's Cadillac Super Cruise fighter?
      What Cadillac dealers can expect from Steve Carlisle
  • EVENTS, WEBINARS & AWARDS
    • 2018 Auto News Canada All Stars
    • Best Dealership To Work For
    • Canada Congress
    • Webinars
    • More women in dealerships is just plain good for business
    • VIDEO: Why Ford's Hinrichs is bullish on USMCA
      Ontario aims to replace GM with Magna, Martinrea or other in Oshawa
      Dealers told standalone stores 'difficult to remain profitable'
      Ford's Joe Hinrichs: Plant closures have 'cascading effects' on industry
  • +MORE
    • NEWSLETTERS
    • SUBSCRIBE
    • CLASSIFIEDS
    • CONTACT US
    • DIGITAL EDITION
MENU
Breadcrumb
  1. Home
  2. Canada
August 09, 2017 01:00 AM

Hackers looking to shut down auto suppliers for pay

The Associated Press
  • Tweet
  • Share
  • Share
  • Email
  • More
    Print
    AW North Carolina has twice been the target of cyber-criminals looking for ransom.

    DURHAM, N.C. -- Auto parts suppliers are increasingly becoming the targets of cyber-criminals looking for a payday by holding the companies hostage through malicious computer viruses and Canadian companies are taking note.

    The president of Canada’s Automotive Parts Manufacturers’ Association says he’s not aware of any Canadian supplier being targeted, but he said his members are increasing security measures.

    “Companies are putting the risk of malware and ransomware into their emergency preparedness plans,” Volpe told Automotive News Canada. “As plants modernize their manufacturing process, the more automation there is, the more they plan for every sort of disruption.

    “With the risk in any disruption, you have to plan to hold more inventory or you risk the chance of holding up your production while your customer is waiting.”

    Volpe said private companies wouldn't make their plans and security measures public.

    TOYOTA SUPPLIER AFFECTED

    Malware entered a North Carolina transmission plant's computer network via email last August, just as the criminals wanted, spreading like a virus and threatening to lock up the production line until the company paid a ransom.

    AW North Carolina stood to lose US $270,000 in revenue, plus wages for idled employees, for every hour the factory wasn't shipping its crucial auto parts to nine Toyota car and truck plants across North America, said John Peterson, the plant's information technology manager.

    The company is just one of a growing number being hit by internet criminals. While online thieves have long targeted banks for digital holdups, today's just-in-time manufacturing sector is climbing toward the top of hackers' hit lists.

    Production lines that integrate computer-imaging, barcode scanners and measuring tolerances to a hair's width at multiple points are more vulnerable to malevolent outsiders.

    "These people who try to hack into your network know you have a set schedule. And they know hours are meaningful to what you're doing," Peterson said in an interview. "There's only a day and a half of inventory in the entire supply chain. And so if we don't make our product in time, that means Toyota doesn't make their product in time, which means they don't have a car to sell on the lot that next day. It's that tight."

    He said that creates pressure on manufacturers to make the criminals go away by paying the sums demanded.

    "They may not know what that number is, but they know it's not zero. So what is that number? Where do you flinch?"

    Last August at the 2,200-worker Durham, N.C., transmission factory, the computer virus coursed through the plant's network, flooding machines with data and stopping production for about four hours, Peterson said.

    Data on some laptops was lost, but the malware was blocked by a firewall when it tried to exit the plant's network and put the hackers' lock on the plant's computer network.

    The plant was hit again in April, this time by different crooks using new malware designed to hold data or devices hostage to force a ransom payment, Peterson said. The virus was contained before affecting production, and no ransom was paid to either group, he said.

    CYBERATTACKS COST MONEY

    Manufacturers, government and financial firms are now the top targets globally for illicit intrusions by criminals, foreign espionage agencies and others up to no good, according to a report this spring by NTT Security.

    A survey of nearly 3,000 corporate cybersecurity executives in 13 countries last year by Cisco Systems Inc. found about one out of four manufacturing organizations reported cyberattacks that cost them money in the previous 12 months.

    Since 2015, U.S. manufacturers considered "critical" to the economy and to normal modern life, like makers of autos and aviation parts, have been the main targets of cyberattacks, outstripping energy, communications and other critical infrastructure, according to Department of Homeland Security incident response data. The numbers may be imprecise because companies in key industries often don't report attacks for fear of diminished public perception.

    That seems to be the case in Canada, too.

    “We don’t collect that data and certainly companies don’t report that to us,” Volpe told Automotive News Canada.

    While manufacturers are increasingly prey to these cyber-stickups, it may just be because criminals are playing the odds and striking as many enterprises of all types as they can across a targeted region, said John Miller, who heads a team at cybersecurity firm FireEye that tracks money-driven online threats.

    Attackers "aren't necessarily going after manufacturing to the exclusion of other sectors or with a preference above other sectors. It's more that, 'OK, we're going to try to infect everybody in this country that we can,"' Miller said.

    One high-profile example came in May and June, when auto manufacturers including Renault shut down production after they were swept up in the worldwide onslaught of the WannaCry ransomware virus.

    ROBOTS TARGETED

    But attackers also are increasingly injecting ways to remotely control the robots and other automated systems that control production inside targeted factories.

    The threat of computer code tailored to hit specific targets has been around since researchers in 2010 discovered Stuxnet, malware apparently designed to sabotage Iran's nuclear program by causing centrifuge machines to spin out of control. Stuxnet is widely believed to be a covert American and Israeli creation, but neither country has officially acknowledged a role in the attack.

    Cyberattacks that reach into industrial control systems have doubled in the past two years in the U.S. to nearly four dozen so far in the federal fiscal year that ends in September, outstripping last year's total, according to DHS data.

    "I think the emerging threat you're going to see in the future now is really custom ransomware that's going to be targeted more toward individual companies," said Neil Hershfield, the acting director of the DHS team that handles emergency response to cyberattacks on industrial control systems.

    Greg Layson of Automotive News Canada contributed to this report.

    Recommended for You
    Digital Edition
    Thumbnail
    View latest issue
    See our archive
    Sign up for free newsletters
    EMAIL ADDRESS

    Please enter a valid email address.

    Please enter your email address.

    Please select at least one newsletter to subscribe.

    You can unsubscribe at any time through links in these emails. For more information, see our Privacy Policy.

    Get Free Newsletters

    Sign up today for our Weekly Newsletter, Daily Newsletter and Breaking News Alerts. We'll deliver the news you need to know straight to your inbox.

    You can unsubscribe at any time through links in these emails. For more information, see our Privacy Policy.

    Subscribe Today

    An Automotive News Canada subscription includes 12 monthly issues – delivered in print to your doorstep, and digitally to your inbox – plus unlimited, 24/7 access to our website.

    Subscribe
    Connect With Us
    • Facebook
    • Twitter
    • Instagram

    Our Mission

    The Automotive News Canada mission is to be the primary source of industry news, data and understanding for the industry's decision-makers interested in Canada.

    Contact Us

    PO Box 243
    Station A
    Windsor, ON
    N9A 6K7

    1-877-812-1257

    Email Us

    Resources
    • About us
    • Contact Us
    • Digital Edition Archive
    • Advertise with Us
    • Reprints
    • Ad Choices Ad Choices
    • Sitemap
    Legal
    • Terms and Conditions
    • Privacy Policy
    Copyright © 1996-2019. Crain Communications, Inc. All Rights Reserved.
    • HOME
    • NEWS BY BRAND
      • Aston Martin
      • BMW
        • Mini
        • Rolls Royce
      • Daimler
        • Mercedes Benz
        • Smart
      • Fiat Chrysler
        • Alfa Romeo
        • Chrysler
        • Dodge
        • Ferrari
        • Fiat
        • Jeep
        • Lancia
        • Maserati
        • Ram
      • Ford
        • Lincoln
      • General Motors
        • Buick
        • Cadillac
        • Chevrolet
        • GMC
      • Honda
        • Acura
      • Hyundai
        • Kia
      • Mazda
      • Mitsubishi
      • Nissan
        • Infiniti
      • Subaru
      • Tata
        • Jaguar
        • Land Rover
      • Tesla
      • Toyota
        • Lexus
      • Volkswagen
        • Audi
        • Bentley
        • Bugatti
        • Lamborghini
        • Porsche
      • Volvo
    • News
      • Auto Shows
        • Toronto Auto Show
      • Photo Galleries
      • Automakers
      • Suppliers
      • Retail
      • Government Relations
      • Trade and Tariffs
      • Technology
      • Labour
    • Opinion
      • Blogs
    • EVENTS, WEBINARS & AWARDS
      • 2018 Auto News Canada All Stars
      • Best Dealership To Work For
      • Canada Congress
      • Webinars
    • +MORE
      • NEWSLETTERS
      • SUBSCRIBE
      • CLASSIFIEDS
      • CONTACT US
      • DIGITAL EDITION