Security News > 2020 > February > IoT Devices at Major Manufacturers Infected With Malware via Supply Chain Attack

Three of the world's largest manufacturers had some IoT devices running Windows 7 infected with a piece of malware in what experts believe to be a supply chain attack.
TrapX Security reported this week that it had identified a cryptocurrency miner on several IoT devices at some major manufacturers, including automatic guided vehicles, a printer and a smart TV. Ori Bach, the CEO of TrapX, told SecurityWeek that the attacks appeared to be part of the same campaign.
At one manufacturing site, the malware was found on several automatic guided vehicles that were running Windows 7.
The cybersecurity firm believes that in all of these cases the malware was installed on the devices before they reached the manufacturers.
"We believe the attack initially targeted the supply chain, and then any manufacturer that was part of the targeted supply chain was affected," Bach told SecurityWeek.
News URL
Related news
- IPany VPN breached in supply-chain attack to push custom malware (source)
- WP3.XYZ malware attacks add rogue admins to 5,000+ WordPress sites (source)
- Mirai Botnet Launches Record 5.6 Tbps DDoS Attack with 13,000+ IoT Devices (source)
- PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack (source)
- Supply chain attack hits Chrome extensions, could expose millions (source)
- MintsLoader Delivers StealC Malware and BOINC in Targeted Cyber Attacks (source)
- Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds look 'insignificant' (source)
- North Korea targets crypto developers via NPM supply chain attack (source)
- Bybit Hack Traced to Safe{Wallet} Supply Chain Attack Exploited by North Korean Hackers (source)
- Silver Fox APT Uses Winos 4.0 Malware in Cyber Attacks Against Taiwanese Organizations (source)