Trucking fleets may be the next targets of ransomware

The Next Victims

Trucking fleets may be the next targets of ransomware

Among the common types of cybersecurity attacks perpetrated on enterprises, arguably none are as sophisticated, effective or lucrative as ransomware is today. Ransomware is a cyber attack in which an actor takes control of an organization’s internal systems and holds it “hostage” until a ransom is paid by the victimized organization.

These attacks thrive on businesses with sensitive consumer data or where the cost of halting operations would far exceed the ransom price demanded by the bad actor, who is expected to retreat and turn over an encryption key to the victim.

Based on current and forthcoming advancements in trucking, such as fleet software and autonomous technology, these companies and their insurance carriers are bracing to have a growing bullseye on them with ransomware attacks moving forward.

Ransomware Continues To Target Supply Chain Businesses

Just last year, ransomware cost U.S. businesses $8 billion. This amount may be shocking at first, but when considering the associated cleanup costs, lost revenue can be 100 to 200 times greater than the ransom itself. Hence, it’s no surprise that 45 percent of ransomware victims and/or insurance companies decide to pay the ransom rather than restore the systems themselves.

Moreover, ransomware attacks skyrocketed in the first quarter of 2019, according to the Beazley Breach Response (BBR) Services team, which reported a 105 percent increase in the number of ransomware attack notifications against clients compared to Q1 2018. Additionally, the average price of ransoms in Q1 2019 increased by 89 percent as compared to Q4 2018.

According to the report, the healthcare sector was hardest hit by ransomware attacks, followed by financial institutions and professional services industries.

Frighteningly, many of these studies are overlooking the looming and existing danger posed to the automotive industry, as ransomware attacks continue to proliferate and expand to new sectors in 2019. Most recently, the public sector was hit with attacks on the cities of Baltimore, MD, and Lake City, FL.

Beyond those threats, there has also been an increase in attacks on supply chain businesses. For example, Norwegian manufacturer Norsk Hydro was hit by a ransomware attack that affected its production and IT systems. They were an opportune target due to the sheer amount of money lost by holding just one part of a large and lucrative supply chain hostage. It is expected that ransomware will only continue to grow based on insurers’ often succumbing to ransom demands and enabling what many call the “extortion economy.”

Why Commercial Trucking Is At High Risk

Ransomware attackers are always looking for new areas of the economy to exploit, and innovation in the commercial automotive space is providing a lucrative opportunity. As trucks continue to become more connected through multiple networks and automotive computers, they open up a new and vulnerable attack vector for malicious hackers to enter these systems.

The cyber-hijacking of a Jeep in 2015 proved cars can be hacked, and the biggest reason that ransomware attacks are not commonplace in the automotive industry yet is simply a lack of monetization and scale, as well as an industry prerogative to keep these new stories quiet.

Both advances in Fleet Management Systems (FMS) for commercial trucking and the emerging practice of truck platooning create numerous vulnerabilities for ransomware cybercriminals to capitalize on these affluent trucking companies and the insurers tasked with writing their policies. Imagine a trucking fleet of perishable food products or expensive medicines is stopped by a hacker en route to customers. Companies would be extremely incentivized to quickly pay a ransom.

FMSs are the central computer – and the heart – of a commercial trucking operation, enabling a series of highly important and specific tasks in the management of any or all aspects relating to a company’s fleets of vehicles. These specific tasks encompass all operations from vehicle acquisition to disposal and coordination between ports and drivers.

Software, depending on its capabilities, allows additional functions such as recording driver and vehicle details, the tracking of procurement costs, scheduling of maintenance and servicing tasks, import of fuel transactions, and measuring of fleet performance via reports and charts. Considering how central long or short-haul trucking is to many businesses around the world, losing visibility or control of the systems would be catastrophic – even for a moment.

If hackers can penetrate just one vulnerable truck in the fleet, they can access the entire system and shut everything down. Logistically, that could result in millions of dollars of lost revenue and put future business at risk, aside from the obvious driver safety issues that could potentially arise.

Additionally, there are more dollars in question here. The driver safety concern is also amplified considerably based on the way the trucking industry is progressing. As buzz grows around the future of autonomous trucking, it is not just the communication and business operations that can be affected, but also the trucks themselves.

While fully autonomous trucking fleets are years away, truck platooning is just four to eight years off. One company leading the charge is Peloton, who announced its “Level-4” autonomous platooning system back in July 2019. In truck platooning, one driver controls a small fleet of trucks directly behind them through vehicle-to-vehicle (V2V) communication that mimics the movements of the driver, which saves gas mileage through drafting and reduces the number of drivers needed on staff.

As with any emerging technologies, there are kinks to be worked out, including adjusting speeds and brake timing for differing cargo weight. Cybersecurity that protects these trucking fleets from attacks has become a necessity, not a luxury or “nice to have,” and must be carefully considered before these technologies become the new normal on the road.

Approaching Security of Connected Trucks

Vehicle security differs widely from enterprise security because of the many moving systems involved. All modern vehicles contain up to 150 electronic control units (ECUs), with commercial vehicles typically housing at least 40 ECUs. In all cases, there is a central ECU that in-vehicle and external communication passes through for each vehicle functionality channel, such as keyless entry, anti-vehicle theft systems, infotainment and telematics, which are constantly transmitted back to the OEM.

The challenge with cyber protection for these ECUs is that every time a new connected feature is added to the vehicle, it is just another vulnerable access point for bad actors to enter the system. Therefore, it is not appropriate to have cybersecurity solutions block each attempt to penetrate the vehicle, but to instead lock down and consolidate all in-vehicle communication to only allow a single type of approved communication to alter functionality. Vehicles require this deterministic model of cybersecurity because randomness of attacks cannot be tolerated when the object is a fast-moving vehicle and lives are on the line.

As all industries cope with the growth of the extortion economy and the widespread proliferation of ransomware, it is important that vehicle safety become a proactive conversation instead of a reactive one. It is only a matter of time before we see vehicle cyberattacks become mainstream, and the auto industry must establish a safety standard for cybersecurity that can adequately protect against bad actors who want to control our vehicles and our lives by extension.

This article originally appeared in the March 2020 issue of Security Today.


  • Maximizing Your Security Budget This Year

    7 Ways You Can Secure a High-Traffic Commercial Security Gate  

    Your commercial security gate is one of your most powerful tools to keep thieves off your property. Without a security gate, your commercial perimeter security plan is all for nothing. Read Now

  • Busy South Africa Building Integrates Custom Access Control System

    Nicol Corner, based in Bedfordview, Johannesburg, South Africa, is home to a six-star fitness club, prime office space, and an award-winning rooftop restaurant. This is the first building in South Africa to have its glass façade fully incorporate fritted glazing, saving 35% on energy consumption. Nicol Corner (Pty) LTD has developed a landmark with sophisticated design and unique architecture by collaborating with industry-leading partners and specifying world-class equipment throughout the project. This includes installing a high-spec, bespoke security and access control system. Read Now

  • Only 13 Percent of Research Institutions Are Prepared for AI

    A new survey commissioned by SHI International and Dell Technologies underscores the transformative potential of artificial intelligence (AI) while exposing significant gaps in preparedness at many research institutions. Read Now

  • Survey: 70 Percent of Organizations Have Established Dedicated SaaS Security Teams

    Seventy percent of organizations have prioritized investment in SaaS security, establishing dedicated SaaS security teams, despite economic uncertainty and workforce reductions. This was a key finding in the fourth Annual SaaS Security Survey Report: 2025 CISO Plans and Priorities released today by the Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment. Read Now

Featured Cybersecurity


New Products

  • Luma x20

    Luma x20

    Snap One has announced its popular Luma x20 family of surveillance products now offers even greater security and privacy for home and business owners across the globe by giving them full control over integrators’ system access to view live and recorded video. According to Snap One Product Manager Derek Webb, the new “customer handoff” feature provides enhanced user control after initial installation, allowing the owners to have total privacy while also making it easy to reinstate integrator access when maintenance or assistance is required. This new feature is now available to all Luma x20 users globally. “The Luma x20 family of surveillance solutions provides excellent image and audio capture, and with the new customer handoff feature, it now offers absolute privacy for camera feeds and recordings,” Webb said. “With notifications and integrator access controlled through the powerful OvrC remote system management platform, it’s easy for integrators to give their clients full control of their footage and then to get temporary access from the client for any troubleshooting needs.” 3

  • Mobile Safe Shield

    Mobile Safe Shield

    SafeWood Designs, Inc., a manufacturer of patented bullet resistant products, is excited to announce the launch of the Mobile Safe Shield. The Mobile Safe Shield is a moveable bullet resistant shield that provides protection in the event of an assailant and supplies cover in the event of an active shooter. With a heavy-duty steel frame, quality castor wheels, and bullet resistant core, the Mobile Safe Shield is a perfect addition to any guard station, security desks, courthouses, police stations, schools, office spaces and more. The Mobile Safe Shield is incredibly customizable. Bullet resistant materials are available in UL 752 Levels 1 through 8 and include glass, white board, tack board, veneer, and plastic laminate. Flexibility in bullet resistant materials allows for the Mobile Safe Shield to blend more with current interior décor for a seamless design aesthetic. Optional custom paint colors are also available for the steel frame. 3

  • Automatic Systems V07

    Automatic Systems V07

    Automatic Systems, an industry-leading manufacturer of pedestrian and vehicle secure entrance control access systems, is pleased to announce the release of its groundbreaking V07 software. The V07 software update is designed specifically to address cybersecurity concerns and will ensure the integrity and confidentiality of Automatic Systems applications. With the new V07 software, updates will be delivered by means of an encrypted file. 3