Introduction
German defense technology company Quantum Systems reported an incident in late October that involved a cyberattack by 'hostile actors.' The company responded quickly, working with authorities to resolve the issue and ensure the safety of its unmanned systems.
Quantum Systems Background
Quantum Systems is a German defense technology company that builds reconnaissance and interceptor drones, along with other unmanned systems and the software that controls them. Its drones are in service with Germany’s military and have recently received support for Ukrainian forces.
Cyberattack Details
The cyberattack was detected via a malicious QBase update file, which is Quantum Systems' ground-control and mission-planning software. The point of compromise was the vendor's update distribution server. Der Spiegel and the Financial Times reported that the Vector reconnaissance drone, known as Falke in German military service, was one of the aircraft affected.
Response and Impact
Quantum Systems believes it was targeted because of its recent announcement of support for Ukraine. The German armed forces grounded Quantum Systems drones as a precautionary measure. The response involves the military counterintelligence (MAD), the domestic intelligence service (BfV), and the federal cybersecurity agency (BSI).
Industry Context
The European defense industry has been facing persistent cyberattacks for years. Quantum Systems stated that companies at the forefront of supporting Ukraine are being targeted precisely because their work is critically relevant to customers' security. Another drone manufacturer, CubePilot, was also targeted by a DNS hijacking attack that caused severe operational disruption.
Previous Cyberattacks
In July, another drone manufacturer, CubePilot, was targeted by a DNS hijacking attack that caused severe operational disruption. The attack could, among other things, be used to deliver malicious updates to downstream users of CubePilot’s drone systems. However, such a level of compromise was never confirmed.
Conclusion
Quantum Systems' cyberattack highlights the ongoing threat to the European defense industry, particularly those companies supporting Ukraine. The incident underscores the importance of robust cybersecurity measures and the need for close collaboration between companies and authorities to mitigate such threats.
Comments