June 24th, 2024

Software company plans to pay millions in ransom to hackers

CDK Global faces a ransomware attack, disrupting operations at 15,000 car dealerships in North America. The company plans to pay hackers millions. The incident exposes the automotive industry's vulnerability to cyber threats.

Read original articleLink Icon
Software company plans to pay millions in ransom to hackers

CDK Global, a software provider for car dealerships in North America, is set to pay hackers tens of millions of dollars in ransom after a cyberattack that disrupted operations at around 15,000 car dealerships. The hackers, believed to be based in eastern Europe, targeted CDK's dealership management system, causing chaos in sales, repairs, and deliveries within the industry. CDK briefly restored some services but had to deactivate them following a second cyberattack. The disruption is affecting dealerships' day-to-day functions, with some resorting to workaround solutions. The parent company, Brookfield Business Partners LP, experienced a decline in trading, as did other dealer groups like AutoNation Inc. and Sonic Automotive Inc. The attack highlights the vulnerability of the automotive industry to cyber threats and the critical reliance of dealerships on software services for their operations. CDK warned customers about potential scammers posing as company affiliates amid the ongoing confusion. The situation underscores the growing trend of ransomware attacks targeting critical infrastructure and the significant financial impacts they can have on businesses.

Related

KrebsOnSecurity Threatened with Defamation Lawsuit over Fake Radaris CEO

KrebsOnSecurity Threatened with Defamation Lawsuit over Fake Radaris CEO

KrebsOnSecurity faced a defamation lawsuit threat for exposing Radaris' true owners, the Lubarsky brothers, linked to questionable practices. Despite demands, KrebsOnSecurity stood by its reporting, revealing a complex web of interconnected businesses.

Simple ways to find exposed sensitive information

Simple ways to find exposed sensitive information

Various methods to find exposed sensitive information are discussed, including search engine dorking, Github searches, and PublicWWW for hardcoded API keys. Risks of misconfigured AWS S3 buckets are highlighted, stressing data confidentiality.

Redbox missed a multimillion-dollar payment it couldn't afford to miss

Redbox missed a multimillion-dollar payment it couldn't afford to miss

Redbox misses $16.7 million payment to NBCUniversal, facing financial distress and potential bankruptcy. Parent company, Chicken Soup for the Soul Entertainment, struggles with debt, legal issues, and unpaid bills, leading to job terminations and business closure. CEO fires board amidst turmoil.

Vulnerability in Popular PC and Server Firmware

Vulnerability in Popular PC and Server Firmware

Eclypsium found a critical vulnerability (CVE-2024-0762) in Intel Core processors' Phoenix SecureCore UEFI firmware, potentially enabling privilege escalation and persistent attacks. Lenovo issued BIOS updates, emphasizing the significance of supply chain security.

EU Accuses Apple App Store Steering Rules of Violating DMA, Opens Investigation

EU Accuses Apple App Store Steering Rules of Violating DMA, Opens Investigation

The European Commission accuses Apple of Digital Markets Act violations related to App Store policies, anti-steering rules, and excessive fees. Apple claims compliance with the law. Investigation ongoing, potential fines pending.

Link Icon 2 comments
By @gnabgib - 5 months
Company = CDK Global

CDK cyber attack shuts down auto dealerships across the U.S. (4 points, 4 days ago) https://news.ycombinator.com/item?id=40732035

By @ttyprintk - 5 months
If this becomes the status quo, can we agree that it’s a reliable source of inflation?