Cyber Espionage Group Targets Aviation Firms to Steal Map Data
The campaign quietly compromises aerospace and drone operators to exfiltrate GIS files, terrain models, and GPS data and gain a clear picture of adversaries' world view.
Stay updated on GPS security threats and advancements. Explore the latest news and insights in the GPS infosec field. Protect your tracking tech today.
Search across headline titles and summaries.
Background for this topic.
GPS (Global Positioning System) is a satellite-based navigation and timing service. A receiver calculates its position and precise time from signals broadcast by satellites; it usually does not authenticate those signals before using them. GPS is one component of the broader family of global navigation satellite systems (GNSS), although “GPS” is often used informally for satellite navigation generally.
Its main security concerns are spoofing and jamming. Spoofing transmits counterfeit signals that can make a receiver report a false location or time; jamming overwhelms the weak satellite signals and causes loss of service. These attacks can disrupt navigation, geofencing, surveying, or systems that depend on GPS timing, but their effect depends on receiver design and signal exposure. Defenses include authenticated signals where available, interference monitoring, plausibility checks, and independent sources such as inertial sensors or terrestrial timing. GPS-enabled phones, vehicles, and tracking systems also create privacy risks because stored location histories can reveal movements and routines; access controls, retention limits, and transparent collection practices are relevant safeguards.
Weekly headline count for the current query.
The campaign quietly compromises aerospace and drone operators to exfiltrate GIS files, terrain models, and GPS data and gain a clear picture of adversaries' world view.
Interference with the global positioning system (GPS) isn't just a problem for airlines, but for shipping, trucking, car navigation, agriculture, and even the financial sector.
An Indian disaster-relief flight delivering aid is the latest air-traffic incident, as attacks increase in the Middle East and Myanmar and along the India-Pakistan border.
Attackers claiming to be part of the Chinese navy are making calls to commercial Qantas pilots midair, while GPS, comms systems, and altimeter instruments are all experiencing denial of service.
A GPS device from MiCODUS has six security bugs that could allow attackers to monitor 1.5 million vehicles that use the tracker, or even remotely disable vehicles.