現在のトレンド
Categories
Cyber Spies Target Russian Aviation Firms for Satellite and GPS Data

Cyber Spies Target Russian Aviation Firms for Satellite and GPS Data
A sophisticated cyber-espionage group known as HeartlessSoul has been actively targeting Russian government agencies and aviation companies to exfiltrate sensitive geospatial and satellite data, according to a recent report by cybersecurity firm Kaspersky. Operating since at least September 2025, the group has concentrated its efforts on organizations and individuals involved in aviation, aiming to obtain geographic information system (GIS) files that contain detailed information about infrastructure, terrain, and potentially strategic facilities.
Methods of Infiltration and Malware Distribution
Kaspersky’s analysis highlights that GIS data, widely used across engineering, government, and industrial sectors, holds highly detailed mapping information that is of significant interest to attackers. The HeartlessSoul group primarily gains access through phishing emails containing infected archive files. Additionally, the group has orchestrated malicious advertising campaigns that impersonate legitimate aviation software websites, deceiving victims into downloading compromised installers. The attackers have also registered domains mimicking aviation resources to distribute malware disguised as trusted software. Once these files are downloaded, they automatically initiate the infection process.
Researchers uncovered that HeartlessSoul exploited the legitimate software hosting platform SourceForge to disseminate malware by uploading a counterfeit version of GearUP, a tool designed to enhance online gaming connections. Users searching for GearUP could inadvertently download spyware capable of capturing screenshots, keystrokes, browser data, and files stored on the infected system. The malware is also capable of extracting Telegram login credentials and determining the device’s physical location.
Links to Other Threat Actors and Broader Implications
Kaspersky’s investigation revealed connections between HeartlessSoul and another hacking group known as Goffee, previously implicated in stealing sensitive files from flash drives connected to infected Russian computers. This overlap suggests possible coordination or shared tactics between the two groups.
The campaign emerges amid escalating challenges for Russian aviation firms, which are increasingly subjected to GPS jamming and spoofing attacks that jeopardize navigation systems and risk operational disruptions. The sector’s heavy reliance on satellite data has raised market concerns, including the potential for increased insurance costs and interruptions to flight operations. In response, some industry players are bolstering cybersecurity defenses and pursuing collaboration with international organizations to counter electronic warfare threats. Reflecting these global concerns, the U.S. Federal Aviation Administration (FAA) recently updated its GPS interference guidelines, emphasizing the need for improved detection and mitigation of such threats.
While Kaspersky identified the aviation sector as the primary target, independent Russian cybersecurity analyst Oleg Shakirov noted that the malware was also distributed through files disguised as FPV drone simulators and tools designed to bypass restrictions on the Starlink satellite internet service. If confirmed, this would indicate that HeartlessSoul’s campaign may also be targeting drone operators, communications specialists, and potentially military personnel.
The ongoing attacks highlight the increasing risks faced by Russian aviation and related sectors as cyber-espionage groups continue to exploit vulnerabilities in satellite and GPS-dependent systems.

American Airlines Collaborates with FAA, DFW Airport, and Major Carriers to Enhance AI Safety in Aviation

AI Becomes Crucial as Aerospace Systems Exceed Human Oversight

Jet Linx seeks to reduce downtime for private jet maintenance

Joby’s Electric Air Taxis Begin Operations in New York

VertiPorts and Joby Aviation to Demonstrate Electric Air Taxi at NYC East 34th Street Heliport

NUATE decries surge in wet-leasing, labels it threat to Nigerian jobs

TrueNoord Names Arcus as Majority Investor

Lufthansa Marks 100th Anniversary with New Uniforms Designed by BOSS

HAL Appoints New Leadership to Guide Aviation Strategy
