Porsche vehicles in Russia have taken to social media platforms to express frustration and concern over a series of issues affecting their cars. According to reports, a growing number of Porsche owners have experienced sudden immobilization of their vehicles, with symptoms including unresponsive security systems, complete battery depletion, and failure of factory-installed Vehicle Tracking Systems (VTS)—systems that also serve as integral components of the car’s alarm mechanisms. The problem, it seems, stems from what many are calling a sophisticated cyber attack involving satellite interference, potentially linked to state-sponsored actors. The widespread disruption has particularly affected Porsche models produced after 2013, with a significant number of owners reporting their cars locking themselves out or becoming entirely inoperable. Models manufactured prior to 2013, on the other hand, appear to be susceptible to jamming or disruption by external satellite-based interference, which is negatively impacting the functionality of critical security features, including the VTS and alarm systems. Impact on Vehicle Immobilizers and Cybersecurity Concerns Yulia Trushkova, Service Director at Rolf (a prominent Russian automotive dealership), confirmed that Porsche vehicles built post-2013 are experiencing malfunctions, likely due to a coordinated attack on the onboard immobilizer systems. These systems are crucial for vehicle security, preventing unauthorized operation or thef

Volkswagen Faces Data Extortion Threat from 8Base Ransomware Group Volkswagen Group is responding to claims by the ransomware group 8Base, which alleges it stole and leaked sensitive data from the automaker. While Volkswagen maintains that its core IT infrastructure remains unaffected, the company’s statement leaves uncertainty about the full extent of the breach, suggesting a possible third-party compromise. The 8Base ransomware operation, active since early 2023, surfaced in September 2024 with claims of a major breach at Volkswagen. Known for its Phobos ransomware variant and double-extortion tactics, the group asserted it exfiltrated confidential files on September 23, 2024, threatening public release by September 26. Though no leaked samples appeared by the deadline, 8Base listed the stolen data on its dark web site, including: - Invoices and receipts - Accounting documents - Employee personal files and contracts - Confidentiality agreements - Certificates and personnel records The breach could involve financial and personal data across Volkswagen’s global operations, affecting brands such as Audi, Porsche, Bentley, Lamborghini, Škoda, SEAT, and Cupra. Security experts note that 8Base operates primarily as a data extortion group, prioritizing theft over encryption to pressure victims into payment. Since its emergence, the group has targeted over 400 organizations, often gaining access via phishing or purchased credentials. Volkswagen, headquartered in Wolfsburg, Germany, confirmed awareness of the incident but emphasized that primary IT systems were not impacted, hinting at a potential supply chain or partner breach. With 153 production plants worldwide and hundreds of thousands of employees, the exposure of sensitive data raises GDPR compliance concerns, with potential fines of up to 4% of global revenue if confirmed. The incident highlights the growing risk of third-party vulnerabilities in critical industries like automotive manufacturing. Investigations remain ongoing.

Porsche is discontinuing its best-selling Macan ICE (Internal Combustion Engine) SUV in Europe from mid-2024 due to non-compliance with the UNECE WP.29 cybersecurity regulations (UN Regulation No. 155), which mandate stricter cybersecurity standards for new vehicles. The existing Macan’s electronic architecture lacks the necessary safeguards against potential cyber threats, malfunctions, or electronic system failures that could compromise vehicle safety. Retrofitting the model to meet these requirements was deemed financially unviable due to the extensive overhaul needed for its control units and cybersecurity management systems. While the decision aligns with Porsche’s broader electrification strategy, the immediate impact includes lost sales revenue in Europe, reputational risk from discontinuing a flagship model, and operational disruptions in supply chains. The move also signals a strategic shift away from ICE vehicles in regulated markets, forcing Porsche to accelerate its EV transition. Though the Macan ICE remains available in other regions (e.g., U.S., UK, Canada), its long-term viability is uncertain if similar cybersecurity mandates expand globally.