Boeing Hit by WannaCry Ransomware Attack, Denies Delivery Schedule Impacted

[btarunr]

Boeing Commercial Airplanes is the latest victim of the "WannaCry" ransomware attack. The American aerospace giant confirmed that "a small number of" legacy computers tasked with automation of wing spar assembly machines were affected, at a company facility north of Charleston, South Carolina. The company denied that this incident impacts its delivery schedule. Boeing manufactures and delivers widebody commercial jets from its facilities in South Carolina, including its latest 787 Dreamliner, which has a massive order backlog of over 700 aircraft. The company is also manufacturing its next-generation 777-X aircraft there.

The guiding principle of "if it ain't broke, don't fix it," resulted in countless manufacturing companies worldwide retaining old computers (or new computers with old software) which drive vital manufacturing equipment, and which are vulnerable to today's malware and ransomware. These computers fall prey to ransomware such as WannaCry. For a high-stakes operation like Boeing's, broken industrial computers result in cascading delays that cost not just the company, but also airlines relying on Boeing to deliver on time, to execute new routes or replace old aircraft. "WannaCry" is a ransomware that encrypts important files in your system, and makes you pay a ransom in untraceable crypto-currency, to decrypt those files.



View at TechPowerUp Main Site

 

[Vayra86]

WannaFly

 

[PerfectWave]

LoL

 

[lexluthermiester]

I think Boeing has missed a very simple solution; Keep mission-critical systems with older software off the internet. It's not difficult.

 

[windwhirl]

Can't believe this keeps happening.

 

[nickbaldwin86]

in other words they are running on Windows XP and they are to lazy to upgrade them

 

[lexluthermiester]

in other words they are running on Windows XP and they are to lazy to upgrade them

That's not it at all. And upgrading is not as easy as you might think for systems with specific requirements like the systems Boeing uses. The best solution is disconnection and isolation from the internet.

 

[nickbaldwin86]

That's not it at all. And upgrading is not as easy as you might think for system with specific requirements like the systems Boeing uses. The best solution is disconnection from the internet.

Agree 100% .... I am an IT Admin, it is possible to have mitigated this risk. I did it. upgrade systems, update systems.... OR GET THEM OFF THE INTERNET!

 

[CrAsHnBuRnXp]

I think Boeing has missed a very simple solution; Keep mission-critical systems with older software off the internet. It's not difficult.

Unless it needs the internet

 

[lexluthermiester]

Unless it needs the internet

I doubt that, and even if so, it'll have to do without.

 

[csgabe]

Don't WannaCry while flying? Upgrade now to Windows 10.

 

[lexluthermiester]

Don't WannaCry while flying? Upgrade now to Linux.

Fixed that for you. Linux is a much better option for a company like Boeing.

 

[btarunr]

in other words they are running on Windows XP and they are to lazy to upgrade them

I suspect more like Windows 98 (for more legacy hardware access).

 

[Melvis]

Install an Anti Virus program maybe? thats all thats needed to stop them these days. Has nothing to do with an "old" Operating System.

 

[nickbaldwin86]

Install an Anti Virus program maybe? thats all thats needed to stop them these days. Has nothing to do with an "old" Operating System.

haha you made a funny... or at least I hope this is a joke

If not then it makes me wanna cry

 

[Melvis]

haha you made a funny... or at least I hope this is a joke

If not then it makes me wanna cry

Have you ever dealt with any of these kinds of Viruses before?

 

[nickbaldwin86]

Have you ever dealt with any of these kinds of Viruses before?

Have you!? these are NOT "viruses"! for 1, gives me the first clue that you are speaking without first bit o knowledge. the first time that word "virus" came up in this topic was your first comment on "anti-virus". so do a bit of research on the difference between a "virus" and a ransomware attack... even google virus vs ransomware and you will retract your comment QUICKLY!

2econdly NO NO NO on your comment again above... because modern "anti-virus" software doesn't even support "legacy OS" what ever they are even referring to? but even Windows XP isn't supported on most and if they are referring to something even older than XP then I will add another NO because NO way is a AV going to cover your system that is over 20 years old against a modern ransomware let alone "VIRUS".

I have had first hand experience in an enterprise environment cleaning systems that got hit, ALL of which had "anti-virus" software, ALL of them were 100% updated and had the most recent package of definitions, 0 and I mean not even 1 of the systems reported a virus, or even reported that an attack was happening to the system.

 

[lexluthermiester]

Hey, let's all be cool.

 

[Melvis]

Have you!? these are NOT "viruses"! for 1, gives me the first clue that you are speaking without first bit o knowledge. the first time that word "virus" came up in this topic was your first comment on "anti-virus". so do a bit of research on the difference between a "virus" and a ransomware attack... even google virus vs ransomware and you will retract your comment QUICKLY!

2econdly NO NO NO on your comment again above... because modern "anti-virus" software doesn't even support "legacy OS" what ever they are even referring to? but even Windows XP isn't supported on most and if they are referring to something even older than XP then I will add another NO because NO way is a AV going to cover your system that is over 20 years old against a modern ransomware let alone "VIRUS".

I have had first hand experience in an enterprise environment cleaning systems that got hit, ALL of which had "anti-virus" software, ALL of them were 100% updated and had the most recent package of definitions, 0 and I mean not even 1 of the systems reported a virus, or even reported that an attack was happening to the system.

Ok someone got out of the bed on the wrong side dismorning?

Virus is a general term by the way, if its "infected" a system then its counted as a Virus regardless of what the proper name is.

Erm hate to tell you but there are still modern AV's out there that support older OS's and so far I still havent seen anywhere that it even says that there running an older OS?

I have had first hand experience with these kinds of infections "virus" and it was on Windows 10 and 7 Machines which I was able to get 50% of there files back.

Ether the AV that they had was shit or the Virus was that new (Within 24hrs) that no AV had signatures for it yet.

The point im saying is that it doesnt matter what OS your using (Yes naturally its going to help with a more modern OS) but your first line of defense is a good AV to stop these Viruses Infecting a Machine and if its a brand new Virus then doesnt matter what AV or OS you have its not going to stop it. It has to do its damage first before it can have AV companys and OS's to secure for it in the future which is usually within the first 24hrs of it happening.