European air traffic control confirms website 'under attack' by pro-Russia hackers
(2023/04/22)
- Reference: 1682147345
- News link: https://www.theregister.co.uk/2023/04/22/eurocontrol_russia_attack/
- Source link:
Europe's air-traffic agency appears to be the latest target in pro-Russian miscreants' attempts to disrupt air travel.
Eurocontrol confirmed on Friday its website has been "under attack" since April 19, and said "pro-Russian hackers" had claimed responsibility for the disruption.
"The attack is causing interruptions to the website and web availability," a spokesperson told The Register . "There has been no impact on European aviation."
[1]
Eurocontrol coordinates commercial traffic between 41 states, including the EU and their national air-traffic control entities. The outage reportedly jammed the agency's communication systems and forced some smaller airlines to use older technology to manage flight schedules, including a fax-era backup system.
[2]
[3]
The Eurocontrol spokesperson declined to answer The Register 's specific questions about the incident, including which systems had been affected, when the organization expected to be fully back online, and whether Killnet was the responsible for the apparent distributed-denial-of-service (DDoS) attacks, as the pro-Kremlin crew [4]claimed on its Russian-language Telegram channel.
"From today, a Eurocontrol marathon is being held, lasting 100 hours," the post said.
[5]
The Wall Street Journal first reported the Eurocontrol website woes, citing a "senior official familiar with the situation," who said that air-traffic safety wasn't at risk. However, the agency's internal and external communication was affected, and this reportedly forced the organization's 2,000 employees to use other commercial communication tools.
"It's been a heavy cyber battle and while operations are entirely safe, doing other things has been difficult," the official [6]told the Wall Street Journal.
[7]Russian hacktivists DDoS hospitals, with pathetic results
[8]Ukraine invasion blew up Russian cybercrime alliances
[9]'Russian hacktivists' brag of flooding German airport sites
[10]FBI: Russian hacktivists achieve only 'limited' DDoS success
Last October, Killnet claimed responsibility for knocking more than a dozen [11]US airports' websites offline in a large-scale DDoS attack. And more recently in February, the miscreants [12]downed German airport websites in a similar fashion.
These types of takedowns don't require much technical know-how, and there's a range of open-source DDoS tools that hacktivists can use to flood target organizations' networks with junk traffic. Both of these things make DDoS attacks relatively easy — and, thus, attractive — for miscreants looking to pull off publicity stunts, but they're seldom more than " [13]nuisance-level " with the right security setup.
The " [14]relatively-unsophisticated " hacktivist crew, which [15]sprang up as a pro-Russia DDoS gang during the Ukraine war, has been urging its affiliates to launch similar network-traffic flooding events against US and European critical infrastructure websites as the West increases its support for Ukraine.
[16]
Most recently this included a DDoS attack that shut down nine [17]Danish hospitals' websites for a few hours in February, but did not have any life-threatening impact on the medical centers' operations or digital infrastructure.
A month earlier, Anonymous Sudan [18]took credit for a traffic tsunami against the websites of the German foreign intelligence service and the Cabinet of Germany, in support of Killnet and in response to the country's plan to send tanks to Ukraine. ®
Get our [19]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZEOwQHG3zr-sv-EVcdBv0gAAABA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZEOwQHG3zr-sv-EVcdBv0gAAABA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZEOwQHG3zr-sv-EVcdBv0gAAABA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[4] https://tgstat.com/channel/@killnet_reservs
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZEOwQHG3zr-sv-EVcdBv0gAAABA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://www.wsj.com/articles/europes-air-traffic-agency-under-attack-from-pro-russian-hackers-54b4514d?mod=article_inline
[7] https://www.theregister.com/2023/02/28/anonymous_sudan_ddos_hospitals/
[8] https://www.theregister.com/2023/02/24/russian_cybercrime_economy/
[9] https://www.theregister.com/2023/02/17/german_airport_websites_ddos/
[10] https://www.theregister.com/2022/11/08/fbi_hacktivists_useless/
[11] https://www.theregister.com/2022/10/10/ddos_us_airport_websites/
[12] https://www.theregister.com/2023/02/17/german_airport_websites_ddos/
[13] https://www.blackberry.com/us/en/solutions/endpoint-security/ransomware-protection/killnet
[14] https://www.theregister.com/2022/11/08/fbi_hacktivists_useless/
[15] https://www.theregister.com/2023/02/24/russian_cybercrime_economy/
[16] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZEOwQHG3zr-sv-EVcdBv0gAAABA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[17] https://www.theregister.com/2023/02/28/anonymous_sudan_ddos_hospitals/
[18] https://www.theregister.com/2023/01/30/russian_hackers_ddos_germany/
[19] https://whitepapers.theregister.com/
Eurocontrol confirmed on Friday its website has been "under attack" since April 19, and said "pro-Russian hackers" had claimed responsibility for the disruption.
"The attack is causing interruptions to the website and web availability," a spokesperson told The Register . "There has been no impact on European aviation."
[1]
Eurocontrol coordinates commercial traffic between 41 states, including the EU and their national air-traffic control entities. The outage reportedly jammed the agency's communication systems and forced some smaller airlines to use older technology to manage flight schedules, including a fax-era backup system.
[2]
[3]
The Eurocontrol spokesperson declined to answer The Register 's specific questions about the incident, including which systems had been affected, when the organization expected to be fully back online, and whether Killnet was the responsible for the apparent distributed-denial-of-service (DDoS) attacks, as the pro-Kremlin crew [4]claimed on its Russian-language Telegram channel.
"From today, a Eurocontrol marathon is being held, lasting 100 hours," the post said.
[5]
The Wall Street Journal first reported the Eurocontrol website woes, citing a "senior official familiar with the situation," who said that air-traffic safety wasn't at risk. However, the agency's internal and external communication was affected, and this reportedly forced the organization's 2,000 employees to use other commercial communication tools.
"It's been a heavy cyber battle and while operations are entirely safe, doing other things has been difficult," the official [6]told the Wall Street Journal.
[7]Russian hacktivists DDoS hospitals, with pathetic results
[8]Ukraine invasion blew up Russian cybercrime alliances
[9]'Russian hacktivists' brag of flooding German airport sites
[10]FBI: Russian hacktivists achieve only 'limited' DDoS success
Last October, Killnet claimed responsibility for knocking more than a dozen [11]US airports' websites offline in a large-scale DDoS attack. And more recently in February, the miscreants [12]downed German airport websites in a similar fashion.
These types of takedowns don't require much technical know-how, and there's a range of open-source DDoS tools that hacktivists can use to flood target organizations' networks with junk traffic. Both of these things make DDoS attacks relatively easy — and, thus, attractive — for miscreants looking to pull off publicity stunts, but they're seldom more than " [13]nuisance-level " with the right security setup.
The " [14]relatively-unsophisticated " hacktivist crew, which [15]sprang up as a pro-Russia DDoS gang during the Ukraine war, has been urging its affiliates to launch similar network-traffic flooding events against US and European critical infrastructure websites as the West increases its support for Ukraine.
[16]
Most recently this included a DDoS attack that shut down nine [17]Danish hospitals' websites for a few hours in February, but did not have any life-threatening impact on the medical centers' operations or digital infrastructure.
A month earlier, Anonymous Sudan [18]took credit for a traffic tsunami against the websites of the German foreign intelligence service and the Cabinet of Germany, in support of Killnet and in response to the country's plan to send tanks to Ukraine. ®
Get our [19]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZEOwQHG3zr-sv-EVcdBv0gAAABA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZEOwQHG3zr-sv-EVcdBv0gAAABA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZEOwQHG3zr-sv-EVcdBv0gAAABA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[4] https://tgstat.com/channel/@killnet_reservs
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZEOwQHG3zr-sv-EVcdBv0gAAABA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://www.wsj.com/articles/europes-air-traffic-agency-under-attack-from-pro-russian-hackers-54b4514d?mod=article_inline
[7] https://www.theregister.com/2023/02/28/anonymous_sudan_ddos_hospitals/
[8] https://www.theregister.com/2023/02/24/russian_cybercrime_economy/
[9] https://www.theregister.com/2023/02/17/german_airport_websites_ddos/
[10] https://www.theregister.com/2022/11/08/fbi_hacktivists_useless/
[11] https://www.theregister.com/2022/10/10/ddos_us_airport_websites/
[12] https://www.theregister.com/2023/02/17/german_airport_websites_ddos/
[13] https://www.blackberry.com/us/en/solutions/endpoint-security/ransomware-protection/killnet
[14] https://www.theregister.com/2022/11/08/fbi_hacktivists_useless/
[15] https://www.theregister.com/2023/02/24/russian_cybercrime_economy/
[16] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZEOwQHG3zr-sv-EVcdBv0gAAABA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[17] https://www.theregister.com/2023/02/28/anonymous_sudan_ddos_hospitals/
[18] https://www.theregister.com/2023/01/30/russian_hackers_ddos_germany/
[19] https://whitepapers.theregister.com/