Ekans Cyber Attack against Honda

Incident Impacts Disruption to Manufacturing/Production, Business Disruption
Affected Sector Manufacturing
Associated Intrusion Sets EKANS Ransomware Operators

In June 2020, Honda's global operations were significantly impacted by a cyber attack. The attack affected Honda's ability to access servers, use email, and other internal systems. The disruption extended to production systems outside of Japan, impacting work at Honda's UK plant and suspending operations in North America, Turkey, Italy, and Japan.

The ransomware was identified as Ekans, malware which targets specific industrial control systems in addition to normal IT systems.

The attack led to the disruption of Honda's production systems globally, forcing the company to put production on hold and send factory workers home.

Cyber Threat Graph Context

Explore how this cyber incident relates to the wider threat graph

Ekans Cyber Attack against Honda Threat Reports

Report

Threat Assessment: EKANS Ransomware

This threat assessment from researchers at Palo Alto's Unit 42 covers the EKANS ransomware. According to the report, EKANS was first observed in ...

Report

EKANS Ransomware and ICS Operations

This blog post by researchers at Dragos talks about the EKANS ransomware variant. EKANS targets industrial control system (ICS) operations, and ...

References