Cyberattack on German air traffic control

On 1 September, German Air Traffic Control (DFS) suffered a cyber attack. The Federal Office for Information Security (BSI) stated that this attack was attributed to the APT28 group.

Although DFS has not published details of the incident due to the sensitivity of it, they have assured that air traffic was not affected and at the time of publication in the media, it is not known what data has been extracted.

Following the incident, DFS immediately contacted BIS for incident management, as well as other organisations and authorities.

The APT28 group, also known as (Fancy Bear, Pawn Storm, Sofacy Group, Sednit, BlueDelta, and STRONTIUM), has been operating since at least 2007. It is believed that this organisation is often behind attacks against NATO member states and their allies, such as Japan and Korea, and that it is actually a military unit belonging to the Russian General Intelligence Directorate of the General Staff (GRU) under the 85th Main Centre for Special Services (GTsSS), unit 26165.