Powered by MOMENTUM MEDIA
cyber daily logo

Breaking news and updates daily. Subscribe to our Newsletter

Breaking news and updates daily. Subscribe to our Newsletter X facebook linkedin Instagram Instagram

Airbus hacked as threat actor claims to have vendor details for sale

A hacker that goes by the moniker USDoD has claimed to have detailed information from an Airbus vendor database and is offering it all up for sale on a popular clear web hacking forum.

user icon David Hollingworth
Tue, 12 Sep 2023
Airbus hacked as threat actor claims to have vendor details for sale
expand image

The hacker posted the data on the site today (12 September) alongside a small sample of the dataset.

The sample data includes the details of a number of high-ranking executives from companies such as Thales Avionics, Aerolux, and a number of individuals who work at Bournemouth International Airport.

Names, addresses, full contact details, titles, and coverage areas – such as Asia-Pacific or Europe, the Middle-East, and Africa – are all included.

============
============

The hacker claims to have gained access to Airbus’ systems using the credentials of an employee of a Turkish airline.

“This month I got access to airbus site using a emploey acces from some turkish airline and this got me inside of alot of stuff plus their vendors data,” the forum post read.

The data is currently for sale for the equivalent of a few euros, and USDoD has said that it has more targets in mind.

“Lockheed martin, Raytheon and the entire defense contractos I’m coming for you bitchs,” it said.

According to Alon Gal, security researcher at Israeli cyber security company Hudson Rock, the data is extensive and contains 3,200 sets of records. Gal – who shared the information on LinkedIn – also believes he has identified the suspected employee whose credentials were used in the hack – they were recorded on Hudson Rock’s database as being the victim of a recent info-stealing campaign.

On the same forum, USDoD also recently posted that he had joined ransomware newcomer Ransomed, which only began operating in August 2023.

We have reached out to Airbus for comment.

David Hollingworth

David Hollingworth

David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.

cd intro podcast

Introducing Cyber Daily, the new name for Cyber Security Connect

Click here to learn all about it
newsletter
cyber daily subscribe
Be the first to hear the latest developments in the cyber industry.