Boeing reportedly hit by WannaCry attacks
But the engineering giant claims reports are “overstated and inaccurate”
Reports that aircraft manufacturer Boeing was hit by the WannaCry malware were "overstated and inaccurate", according to a company spokeswoman.
According to the Seattle Times, Boeing was hit on Wednesday by an outbreak of the WannaCry malware affecting some manufacturing equipment. The report initially said that assembly lines potentially affected included those of Boeing's 787 Dreamliner North Charleston, South Carolina, and the 777X Composite Wing Center,
The report cited a memo sent by Boeing engineer Mike VanderWel, that said the problem was "metastasizing rapidly out of North Charleston and I just heard 777 (automated spar assembly tools) may have gone down". He added that he was concerned that the malware would hit airplane testing equipment and "spread to airplane software".
As WannaCry targets a flaw in Windows, it is extremely unlikely that it could affect critical computer systems in a plane that run non-Windows operating systems.
VanderWel added that the outbreak required "a battery-like response". This refers to an issue affecting 787 in-flight batteries in 2013, that led to the Dreamliner being grounded for three months while the problem was fixed.
However, after reports came out, Linda Mills, VP of Boeing commercial airplanes communications, said in a statement to the media that these were "overstated and inaccurate".
"Our cybersecurity operations center detected a limited intrusion of malware that affected a small number of systems," it said. "Remediations were applied and this is not a production and delivery issue."
Mills told the Seattle Times that the attack was limited to computers in the Commercial Airplanes division and that the military and services units were not affected. She added that the attack did "no significant damage".
Nevertheless, it does raise some questions as to why the aircraft company was hit by a WannaCry, given it has been around for a number of months and mitigations are available.
What you need to know about migrating to SAP S/4HANA
Factors to assess how and when to begin migrationDownload now
Your enterprise cloud solutions guide
Infrastructure designed to meet your company's IT needs for next-generation cloud applicationsDownload now
Testing for compliance just became easier
How you can use technology to ensure compliance in your organisationDownload now
Best practices for implementing security awareness training
How to develop a security awareness programme that will actually change behaviourDownload now