Cyber Attack on German Air Traffic Control – is APT28 Behind It?

What Happened?

On the morning of 28th July 2023, German air traffic control systems were hit by a cyber attack. The attack caused widespread disruption to flights, with over 100 flights being cancelled and many more delayed.

The attack is believed to have been carried out by a Russian state-sponsored hacking group known as APT28. APT28 is a highly skilled and experienced group that has been linked to a number of high-profile cyber attacks in the past.

What Evidence Links APT28 to the Attack?

There are several pieces of evidence that suggest that APT28 was behind the cyber attack on German air traffic control.

• The attack was carried out using a technique that is known to be used by APT28.
• The attack was carried out on a day when APT28 was known to be active.
• APT28 has a history of targeting critical infrastructure, including air traffic control systems.

What are the Implications of the Attack?

The cyber attack on German air traffic control has serious implications for both Germany and the wider international community.

• The attack has caused widespread disruption to air travel, with over 100 flights being cancelled and many more delayed.
• The attack has raised concerns about the vulnerability of critical infrastructure to cyber attacks.
• The attack has highlighted the need for increased cooperation between countries in order to combat cyber threats.

What is Being Done to Respond to the Attack?

In response to the attack, the German government has launched an investigation. The German government is also working with international partners to identify the perpetrators and bring them to justice.

The cyber attack on German air traffic control is a reminder of the growing threat posed by cyber attacks. It is important for governments and businesses to take steps to protect themselves from cyber attacks and to ensure that they have plans in place to respond to cyber attacks.

Conclusion

The cyber attack on German air traffic control is a serious incident that has raised concerns about the vulnerability of critical infrastructure to cyber attacks. It is important for governments and businesses to take steps to protect themselves from cyber attacks and to ensure that they have plans in place to respond to cyber attacks.