This article is from the source 'nytimes' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.

You can find the current article at its original source at https://www.nytimes.com/2020/06/12/business/ransomware-honda-hacking-factories.html

The article has changed 9 times. There is an RSS feed of changes available.

Version 7 Version 8
Honda Hackers May Have Used Tools Favored by Countries Honda Hackers May Have Used Tools Favored by Countries
(7 days later)
A computer virus hit the Japanese automaker Honda this week, disrupting its internal computer networks, forcing it to shut factories across the globe and leaving employees cut off from email or internal servers.A computer virus hit the Japanese automaker Honda this week, disrupting its internal computer networks, forcing it to shut factories across the globe and leaving employees cut off from email or internal servers.
While Honda has declined to name the attackers or the tools they used, cybersecurity analysts said that the attack appears to have been carried out by software designed to attack the control systems for a wide variety of industrial facilities like factories and power plants. Such cyberweapons previously were only known to have been used by state agents.While Honda has declined to name the attackers or the tools they used, cybersecurity analysts said that the attack appears to have been carried out by software designed to attack the control systems for a wide variety of industrial facilities like factories and power plants. Such cyberweapons previously were only known to have been used by state agents.
In the hands of criminals, the tools could be used not just to steal data or disrupt business operations but to bring factories to a grinding halt or switch off power grids.In the hands of criminals, the tools could be used not just to steal data or disrupt business operations but to bring factories to a grinding halt or switch off power grids.
Previous assaults on Japanese corporations have been aimed at disrupting communications, or stealing or holding data hostage, according to Masahiro Shimomura, head of the Japan Network Security Association.Previous assaults on Japanese corporations have been aimed at disrupting communications, or stealing or holding data hostage, according to Masahiro Shimomura, head of the Japan Network Security Association.
“This is a real advancement,” he said. “The ability to infect process controls, in other words, the production line, that means it’s quite advanced.”“This is a real advancement,” he said. “The ability to infect process controls, in other words, the production line, that means it’s quite advanced.”
In a statement, Honda said it canceled production at most North American plants on Monday, resumed production at some on Tuesday and had all back running by Thursday. The virus also halted work at Honda factories in Brazil, India and Turkey. The company said it had so far found no evidence of a loss of personally identifiable information.In a statement, Honda said it canceled production at most North American plants on Monday, resumed production at some on Tuesday and had all back running by Thursday. The virus also halted work at Honda factories in Brazil, India and Turkey. The company said it had so far found no evidence of a loss of personally identifiable information.
Emails sent by Honda to American auto dealers said that the virus had affected the American Honda Finance Corporation, which was unable to “answer calls, fund contracts, provide payoff quotes or service customer accounts.” A system that automatically orders parts for dealers was also suspended, and dealers were unable to submit new warranty claims, the emails said.Emails sent by Honda to American auto dealers said that the virus had affected the American Honda Finance Corporation, which was unable to “answer calls, fund contracts, provide payoff quotes or service customer accounts.” A system that automatically orders parts for dealers was also suspended, and dealers were unable to submit new warranty claims, the emails said.
On Friday, Misako Saka, a spokeswoman for Honda, said that the company had “almost entirely recovered.”On Friday, Misako Saka, a spokeswoman for Honda, said that the company had “almost entirely recovered.”
Production at the company’s factories “was temporarily paused to ensure safety,” she said, adding that the company reopened the last factory, located in Ohio, on Thursday morning.Production at the company’s factories “was temporarily paused to ensure safety,” she said, adding that the company reopened the last factory, located in Ohio, on Thursday morning.
The attack was identified Monday morning in Japan, when employees could not open their email or files, she said, adding that the virus had “penetrated an internal sever and then spread.”The attack was identified Monday morning in Japan, when employees could not open their email or files, she said, adding that the virus had “penetrated an internal sever and then spread.”
The company ordered employees not to turn on corporate computers and temporarily shut factories to assess the extent of the damage.The company ordered employees not to turn on corporate computers and temporarily shut factories to assess the extent of the damage.
Updated July 7, 2020
The coronavirus can stay aloft for hours in tiny droplets in stagnant air, infecting people as they inhale, mounting scientific evidence suggests. This risk is highest in crowded indoor spaces with poor ventilation, and may help explain super-spreading events reported in meatpacking plants, churches and restaurants. It’s unclear how often the virus is spread via these tiny droplets, or aerosols, compared with larger droplets that are expelled when a sick person coughs or sneezes, or transmitted through contact with contaminated surfaces, said Linsey Marr, an aerosol expert at Virginia Tech. Aerosols are released even when a person without symptoms exhales, talks or sings, according to Dr. Marr and more than 200 other experts, who have outlined the evidence in an open letter to the World Health Organization.
Common symptoms include fever, a dry cough, fatigue and difficulty breathing or shortness of breath. Some of these symptoms overlap with those of the flu, making detection difficult, but runny noses and stuffy sinuses are less common. The C.D.C. has also added chills, muscle pain, sore throat, headache and a new loss of the sense of taste or smell as symptoms to look out for. Most people fall ill five to seven days after exposure, but symptoms may appear in as few as two days or as many as 14 days.
Scientists around the country have tried to identify everyday materials that do a good job of filtering microscopic particles. In recent tests, HEPA furnace filters scored high, as did vacuum cleaner bags, fabric similar to flannel pajamas and those of 600-count pillowcases. Other materials tested included layered coffee filters and scarves and bandannas. These scored lower, but still captured a small percentage of particles.
A commentary published this month on the website of the British Journal of Sports Medicine points out that covering your face during exercise “comes with issues of potential breathing restriction and discomfort” and requires “balancing benefits versus possible adverse events.” Masks do alter exercise, says Cedric X. Bryant, the president and chief science officer of the American Council on Exercise, a nonprofit organization that funds exercise research and certifies fitness professionals. “In my personal experience,” he says, “heart rates are higher at the same relative intensity when you wear a mask.” Some people also could experience lightheadedness during familiar workouts while masked, says Len Kravitz, a professor of exercise science at the University of New Mexico.
The steroid, dexamethasone, is the first treatment shown to reduce mortality in severely ill patients, according to scientists in Britain. The drug appears to reduce inflammation caused by the immune system, protecting the tissues. In the study, dexamethasone reduced deaths of patients on ventilators by one-third, and deaths of patients on oxygen by one-fifth.
The coronavirus emergency relief package gives many American workers paid leave if they need to take time off because of the virus. It gives qualified workers two weeks of paid sick leave if they are ill, quarantined or seeking diagnosis or preventive care for coronavirus, or if they are caring for sick family members. It gives 12 weeks of paid leave to people caring for children whose schools are closed or whose child care provider is unavailable because of the coronavirus. It is the first time the United States has had widespread federally mandated paid leave, and includes people who don’t typically get such benefits, like part-time and gig economy workers. But the measure excludes at least half of private-sector workers, including those at the country’s largest employers, and gives small employers significant leeway to deny leave.
So far, the evidence seems to show it does. A widely cited paper published in April suggests that people are most infectious about two days before the onset of coronavirus symptoms and estimated that 44 percent of new infections were a result of transmission from people who were not yet showing symptoms. Recently, a top expert at the World Health Organization stated that transmission of the coronavirus by people who did not have symptoms was “very rare,” but she later walked back that statement.
Touching contaminated objects and then infecting ourselves with the germs is not typically how the virus spreads. But it can happen. A number of studies of flu, rhinovirus, coronavirus and other microbes have shown that respiratory illnesses, including the new coronavirus, can spread by touching contaminated surfaces, particularly in places like day care centers, offices and hospitals. But a long chain of events has to happen for the disease to spread that way. The best way to protect yourself from coronavirus — whether it’s surface transmission or close human contact — is still social distancing, washing your hands, not touching your face and wearing masks.
A study by European scientists is the first to document a strong statistical link between genetic variations and Covid-19, the illness caused by the coronavirus. Having Type A blood was linked to a 50 percent increase in the likelihood that a patient would need to get oxygen or to go on a ventilator, according to the new study.
If air travel is unavoidable, there are some steps you can take to protect yourself. Most important: Wash your hands often, and stop touching your face. If possible, choose a window seat. A study from Emory University found that during flu season, the safest place to sit on a plane is by a window, as people sitting in window seats had less contact with potentially sick people. Disinfect hard surfaces. When you get to your seat and your hands are clean, use disinfecting wipes to clean the hard surfaces at your seat like the head and arm rest, the seatbelt buckle, the remote, screen, seat back pocket and the tray table. If the seat is hard and nonporous or leather or pleather, you can wipe that down, too. (Using wipes on upholstered seats could lead to a wet seat and spreading of germs rather than killing them.)
If you’ve been exposed to the coronavirus or think you have, and have a fever or symptoms like a cough or difficulty breathing, call a doctor. They should give you advice on whether you should be tested, how to get tested, and how to seek medical treatment without potentially infecting or exposing others.
The cybersecurity firm Malwarebytes and other analysts said that the tool used in the attack was most likely a relatively new variety of ransomware meant to disrupt industrial systems, in addition to the standard practice of encrypting files.The cybersecurity firm Malwarebytes and other analysts said that the tool used in the attack was most likely a relatively new variety of ransomware meant to disrupt industrial systems, in addition to the standard practice of encrypting files.
The most famous example of a virus that targets industrial controls is Stuxnet, which was jointly developed by Israel and the United States and used to destroy over 1,000 centrifuges used in Iran’s uranium enrichment program.The most famous example of a virus that targets industrial controls is Stuxnet, which was jointly developed by Israel and the United States and used to destroy over 1,000 centrifuges used in Iran’s uranium enrichment program.
The attack on Honda, Malwarebytes wrote in a recent blog post, was probably carried out using a variation on a group of programs called Snake — also known as Ekans, or snake spelled backward — which was identified in December.The attack on Honda, Malwarebytes wrote in a recent blog post, was probably carried out using a variation on a group of programs called Snake — also known as Ekans, or snake spelled backward — which was identified in December.
The company based its assessment on information posted to an online repository. Attempts to run the code in the company’s lab showed that it was specifically aimed at Honda’s internal networks, Malwarebytes wrote.The company based its assessment on information posted to an online repository. Attempts to run the code in the company’s lab showed that it was specifically aimed at Honda’s internal networks, Malwarebytes wrote.
Although Honda has declined to specify how the virus entered its networks, speculation has centered around a possible breach related to remote working policies put in place after the beginning of the coronavirus pandemic.Although Honda has declined to specify how the virus entered its networks, speculation has centered around a possible breach related to remote working policies put in place after the beginning of the coronavirus pandemic.
A system that gives employees remote access to internal networks may have opened an opportunity for hackers to introduce the virus, Malwarebytes wrote.A system that gives employees remote access to internal networks may have opened an opportunity for hackers to introduce the virus, Malwarebytes wrote.
Neal E. Boudette contributed reporting.Neal E. Boudette contributed reporting.