site banner

The latest in industrial sabotage: geofenced passenger trains that fail when repaired in competitors' yards

badcyber.com

Some were also rigged to fail after a certain date or beyond a certain mileage.

20
Jump in the discussion.

No email address required.

Is this a generalised system or tailor-made for each train/competitor?

Newag claims that this system does not exist, and if exist it was added by competition and it is not their fault.

Obviously, competition sabotaging repair service done not be Newag seems quite unlikely. Not sure why they went with this idea.

That might be possible but it's not stated anywhere in the article.

it was in some later articles, including some Polish ones and their PR releases

https://www.newag.pl/wp-content/uploads/2023/12/Oswiadczenie-NEWAG-06.12.2023.pdf

They are claiming they never introduced software that simulated failures and if it existed it was added by competition.

They demand withdrawal from service trains that were analysed, threaten legal action against SPS and people who analysed software.

they failed to communicate what this security system was

it was a not a security system

Thanks for the added context. If what you say is true then it sounds like a pretty open and shut case.

https://youtube.com/watch?v=XrlrbfGZo2k CCC publication is making situation quite clear, even if they do not take final step (because it is not fully 100% provable and they will likely end as witnesses in court cases, and what is clearly provable is damming anyway)

spicier bits include Newag making software changes to specific trains, two/three days before being send to be repaired at workshop of their competition ( https://youtube.com/watch?v=XrlrbfGZo2k&t=2369 ), not mentioning software updates in paperwork, train predicted to break down at specific date (due to bug in sabotage code) and then doing this...

overall great presentation, though quite technical (presented at hacking conference)

Very interesting. Thank you!