Space systems face increasing cyber threats, Kaspersky report reveals

Space systems are increasingly becoming targets for cyberattacks, with over 100 incidents recorded between 1957 and the early 2020s. A recent report by Kaspersky ICS CERT highlights that modern space security extends beyond protecting physical satellites, encompassing interconnected ground control stations, communication links, and user terminals, based on information published by TahawulTech.

Kaspersky's research indicates that attackers exploit the weakest links in the space system chain, particularly Global Navigation Satellite Systems (GNSS). Over 3,000 internet-exposed GNSS receivers are vulnerable, posing risks to maritime, aviation, and land logistics. Threat actors also abuse satellite infrastructure for anonymity, routing communications through hijacked traffic. Commercially available tools can intercept unencrypted satellite feeds, a vulnerability exploited by APT groups like Turla and Thrip.

The Viasat KA-SAT network attack in 2022, initiated via a misconfigured VPN, deployed the AcidRain wiper, disabling terminals and halting wind turbine operations. The successor, AcidPour, targets a wider range of devices. To mitigate these risks, Kaspersky recommends auditing and patching internet-facing hardware, encrypting communication links, and implementing robust endpoint protection and access controls on ground stations.

Source: TahawulTech