Friday, December 15, 2023

A train manufacturer in Poland, seems to have coded it's trains to brick (shut down and be as useless as a brick) if it entered geographic areas that corresponded to GPS coordinates for an independent repair shop

Members of an ethical hacking group called Dragon Sector, including Sergiusz Bazański and Michał Kowalczyk, were called upon by a train repair shop, Serwis Pojazdów Szynowych (SPS), to analyze train software in June 2022. SPS was desperate to figure out what was causing "mysterious failures" that shut down several vehicles owned by Polish train operator the Lower Silesian Railway, Polish infrastructure trade publication Rynek Kolejowy reported. At that point, the shortage of trains had already become "a serious problem" for carriers and passengers, as fewer available cars meant shorter trains and reduced rider capacity, Rynek Kolejowy reported.

Dragon Sector spent two months analyzing the software, finding that "the manufacturer's interference" led to "forced failures and to the fact that the trains did not start," and concluding that bricking the trains "was a deliberate action on Newag's part."

According to Dragon Sector, Newag entered code into the control systems of Impuls trains to stop them from operating if a GPS tracker indicated that the train was parked for several days at an independent repair shop.

The trains "were given the logic that they would not move if they were parked in a specific location in Poland, and these locations were the service hall of SPS and the halls of other similar companies in the industry," Dragon Sector's team alleged. "Even one of the SPS halls, which was still under construction, was included."

No comments:

Post a Comment