Cyber Attack Hits German Air Traffic Control

The German air traffic control agency, Deutsche Flugsicherung (DFS), has confirmed that it was hit by a cyber attack disrupting its office communications. The recent attack affected the company’s IT infrastructure but has not impact air traffic control operations and flights were unaffected.

This cyber attack was probably done by APT28, also known as Fancy Bear, a notorious hacker group closely linked to the Russian military intelligence service GRU.

APT28 has been cyber hacking government agencies, political organisations, and media outlets across Europe and North America since 2004. The group has a history of attacks on critical infrastructure. But in Germany, APT28 is known for a cyber attack against the Bundestag in 2015.

A DFS spokesperson confirmed that the attack happened and has said that they are implementing defensive measures. The nature of the attack remains unclear, and it is not yet known whether any sensitive data was compromised.

The Federal Office for the Protection of the Constitution (BfV) has been notified, and the incident is under investigation.

The BfV, which has monitored APT28’s activities for years, emphasises the group’s ties to the GRU, suggesting that the attack may have geopolitical motivations beyond mere criminal intent. Authorities have not said anything about the ongoing investigation, with the Federal Ministry of Transport overseeing DFS, referring inquiries back to the agency itself.

The involvement of APT28, if confirmed, would underscore the geo-political dimensions of the attack

APT28 has been implicated in a lot of cyber attacks with politically motivated goals, and its links to the Russian GRU suggest that such incidents may be part of broader efforts to influence international affairs and promote political instability.

The Record     |     TEISS     |     BR24     |     Commercial Risk     |     Pravda     |     Euro Integration

Image: Pixabay

You Might Also Read: 

Russia’s Cyber Strategy:


If you like this website and use the comprehensive 7,000-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« Iranian Campaign Targets WhatsApp Users
How AI Will Help Disrupt Elections Around The Globe »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

InfoSec World

InfoSec World

InfoSec World conference and expo covers all aspects of information security with a broad agenda of sessions on key security issues.

Information Security Forum (ISF)

Information Security Forum (ISF)

The ISF is a leading authority on information security and risk management.

Securi-Tay

Securi-Tay

Securi-Tay is an information Security conference held by the Ethical Hacking Society at Abertay University, Dundee.

AirCUVE

AirCUVE

AirCUVE provide authentication and access control solutions for networks and mobile security.

CyberPoint

CyberPoint

CyberPoint delivers innovative, leading-edge cyber security products, solutions, and services to customers worldwide.

Auxilium Cyber Security

Auxilium Cyber Security

Auxilium Cyber Security is independent information security consultancy company.

Swiss Cyber Think Tank (SCTT)

Swiss Cyber Think Tank (SCTT)

The Swiss Cyber Think Tank is a business network for Cyber Risk & Insurability, providing an industry-wide networking platform for insurers, technology and security firms.

Carbide

Carbide

Carbide (formerly Securicy) breaks down enterprise-class security and privacy requirements and makes them accessible to, and achievable by, companies of all sizes.

Neovera

Neovera

Neovera is a trusted provider of managed services including cyber security and enterprise cloud solutions, committed to delivering results through the innovative use of scalable enterprise-grade tech.

SurePassID

SurePassID

SurePassID is a provider of highly secure, highly extensible multi-factor authentication (MFA) solutions.

Data Storage Corp (DSC)

Data Storage Corp (DSC)

Data Storage Corporation is a provider of data recovery and business continuity services that help organizations protect their data, minimize downtime and recover and restore data.

Tailscale

Tailscale

Tailscale is a VPN service that makes the devices and applications you own accessible anywhere in the world, securely and effortlessly.

Quatrro Business Support Services (QBSS)

Quatrro Business Support Services (QBSS)

QBSS is a tech-enabled outsourcing firm that’s changing the way companies think about finance, accounting, human resources and technology services.

CyberMontana

CyberMontana

CyberMontana is a statewide initiative providing cybersecurity awareness, training, and workforce development for businesses and residents of Montana.

L&T Technology Services (LTTS)

L&T Technology Services (LTTS)

L&T Technology Services Limited (LTTS) is a global leader in Engineering and R&D (ER&D) services.

Rapifuzz

Rapifuzz

At Rapifuzz, our goal is to help organizations test and secure their APIs enabling trust, innovation and Seamless Secured Digital Experiences.