Security News > 2020 > February > New Ransomware Targets Industrial Control Systems

EKANS also uses another trick to ratchet up the pain: It's designed to terminate 64 different software processes on victim computers, including many that are specific to industrial control systems.

That allows it to then encrypt the data that those control system programs interact with.

While crude compared to other malware purpose-built for industrial sabotage, that targeting can nonetheless break the software used to monitor infrastructure, like an oil firm's pipelines or a factory's robots.

EKANS is actually the second ransomware to hit industrial control systems.

According to Dragos, another ransomware strain known as Megacortex that first appeared last spring included all of the same industrial control system process-killing features, and may in fact be a predecessor to EKANS developed by the same hackers.

News URL

https://www.schneier.com/blog/archives/2020/02/new_ransomware_.html