Превращайте аналитические выводы ИИ в реальные действия
В тренде
Categories
Cyber Spies Target Russian Aviation Firms for Satellite and GPS Data

Cyber Spies Target Russian Aviation Firms for Satellite and GPS Data
A sophisticated cyber-espionage group known as HeartlessSoul has been actively targeting Russian government agencies and aviation companies to exfiltrate sensitive geospatial and satellite data, according to a recent report by cybersecurity firm Kaspersky. Operating since at least September 2025, the group has concentrated its efforts on organizations and individuals involved in aviation, aiming to obtain geographic information system (GIS) files that contain detailed information about infrastructure, terrain, and potentially strategic facilities.
Methods of Infiltration and Malware Distribution
Kaspersky’s analysis highlights that GIS data, widely used across engineering, government, and industrial sectors, holds highly detailed mapping information that is of significant interest to attackers. The HeartlessSoul group primarily gains access through phishing emails containing infected archive files. Additionally, the group has orchestrated malicious advertising campaigns that impersonate legitimate aviation software websites, deceiving victims into downloading compromised installers. The attackers have also registered domains mimicking aviation resources to distribute malware disguised as trusted software. Once these files are downloaded, they automatically initiate the infection process.
Researchers uncovered that HeartlessSoul exploited the legitimate software hosting platform SourceForge to disseminate malware by uploading a counterfeit version of GearUP, a tool designed to enhance online gaming connections. Users searching for GearUP could inadvertently download spyware capable of capturing screenshots, keystrokes, browser data, and files stored on the infected system. The malware is also capable of extracting Telegram login credentials and determining the device’s physical location.
Links to Other Threat Actors and Broader Implications
Kaspersky’s investigation revealed connections between HeartlessSoul and another hacking group known as Goffee, previously implicated in stealing sensitive files from flash drives connected to infected Russian computers. This overlap suggests possible coordination or shared tactics between the two groups.
The campaign emerges amid escalating challenges for Russian aviation firms, which are increasingly subjected to GPS jamming and spoofing attacks that jeopardize navigation systems and risk operational disruptions. The sector’s heavy reliance on satellite data has raised market concerns, including the potential for increased insurance costs and interruptions to flight operations. In response, some industry players are bolstering cybersecurity defenses and pursuing collaboration with international organizations to counter electronic warfare threats. Reflecting these global concerns, the U.S. Federal Aviation Administration (FAA) recently updated its GPS interference guidelines, emphasizing the need for improved detection and mitigation of such threats.
While Kaspersky identified the aviation sector as the primary target, independent Russian cybersecurity analyst Oleg Shakirov noted that the malware was also distributed through files disguised as FPV drone simulators and tools designed to bypass restrictions on the Starlink satellite internet service. If confirmed, this would indicate that HeartlessSoul’s campaign may also be targeting drone operators, communications specialists, and potentially military personnel.
The ongoing attacks highlight the increasing risks faced by Russian aviation and related sectors as cyber-espionage groups continue to exploit vulnerabilities in satellite and GPS-dependent systems.

Comparing the Size of the Boeing 777-300ER and 787 Dreamliner

The Role of Informal Pilot Conversations in Aircraft Maintenance and Safety

Hong Kong's Metrojet Adds Bombardier Global 8000 to Fleet

CANAVIA Aviation Academy Orders New Tecnam Aircraft

Lalit Seth Institute of Aviation and Logistics Management Opens Admissions for 2026-27

Business Aviation Draws Investors as Aerospace M&A Deals Surge

Al Maktoum International Airport Project Reaches Key Milestones

Avincis Signs Agreement to Acquire Up to 15 Airbus H145 Helicopters

China Airlines launches cargo AI customer service bot
