By the way: The train manufacturer company is suing the people who exposed this, and CCC is collecting donations for their legal support - details on the page linked above.
The “defence” of Newag is wild: they claimed that the repair company (SPS) installed these malicious parts of the software. Why would SPS would do that and lose the repair contract back to Newag? That’s just a cartoonishly dumb claim
Statement and more informations from the German CCC alias Chaos Computer Club, a civil rights organization of software tweakers and computer experts:
https://www.ccc.de/en/updates/2024/das-ist-vollig-entgleist
By the way: The train manufacturer company is suing the people who exposed this, and CCC is collecting donations for their legal support - details on the page linked above.
The “defence” of Newag is wild: they claimed that the repair company (SPS) installed these malicious parts of the software. Why would SPS would do that and lose the repair contract back to Newag? That’s just a cartoonishly dumb claim