Air APT
State-sponsored entities targeting Airline Industry (Part 1)
Executive Summary
Airlines and the airport industry in general are highly lucrative targets for APT groups; they are rife with information that other countries would find useful.
NETSCOUT data from 2019 shows airport and airline targeting remains strong and steady, with Russian, Chinese, and Iranian APT groups attempting access.
Not only do we see state-sponsored threats targeting the industry, we also see a large amount of DDoS attacks, which we’ll cover in a follow-up blog (Part 2).
Read the whole article - Free - Click Here
Key Findings:
• Airlines and airports are targeted by APT actors regularly as they possess a wealth of information on people, logistics, business, and intellectual property.
• Airlines and airports are critical infrastructure entities with security concerns that extend far beyond physical security of passengers.
• Substantial theft by APT groups has already occurred; the information now in the hands of adversarial states is concerning.
Airline Industry Targeting
Airlines and airports are targeted by APT actors regularly, although it’s usually the intellectual property theft from airplane manufacturers that gets the most attention.
There are many reasons why the airline industry or airports themselves would be targets of APT:
Logistics of Things
Logistics of Passengers
The Information of Passengers
Business Information
Intellectual Property
Smuggling
Sabotage, Destruction, & Terrorism
Read the entire article - Free - Click here
Want more information on Threat Intelligence, Attack modalities...etc - Click Here
Author - ATLAS Security Engineering & Response Team (ASERT)