Kaspersky ICS CERT: Space Systems Face Growing Cyberattack Threats

According to publicly available data, more than 100 cyber incidents targeting space systems were recorded between 1957 and the early 2020s. Kaspersky ICS CERT’s recent report highlights that modern space security extends beyond satellites to ground control stations, communication links, user terminals, and third-party software.

A key concern is GNSS security. Following a spike in GPS/GNSS spoofing in the Black Sea region in 2023, Kaspersky researchers, in collaboration with 70 equipment vendors, identified more than 3,000 GNSS receivers vulnerable to direct internet-based attacks, posing risks to maritime, aviation, and land logistics.

Satellite infrastructure can also be exploited to conceal malicious activity. In 2022, the AcidRain wiper attack on Viasat’s KA-SAT network disabled approximately 30,000 satellite terminals and disrupted remote operations at more than 5,800 wind turbines. The 2024 discovery of AcidPour further demonstrated the expanding threat to routers, satellite modems, and data storage systems.

"A space system comprises far more than what is launched into orbit; the ground-based control networks, communication channels, and subscriber receivers represent the true, and often fragile, operational foundation of the entire system. As satellite technology becomes deeper integrated into civilian life – from navigation systems to energy grids – securing these connections, enforcing encryption on downstream links, and patching vulnerable internet-exposed receivers is of highest importance," commented Ekaterina Rudina, Security Analysis Expert at Kaspersky.

Read the full report on Kaspersky ICS CERT’s website.