Honda EKANS ransomware attack

On June 8, 2020, Honda was hit by the EKANS (Snake) ransomware, which contains a hard-coded list of ICS-related processes it terminates before encrypting hosts. Honda halted production at multiple plants in North America, Turkey, and Brazil for at least one day while assessing the impact.

Honda confirmed disruption to production, sales, and development activities; several factories were idled for around 24 hours. The incident is notable because EKANS was the first ransomware family with explicit awareness of ICS process names.