ARINC SelfServ vMUSE devices are down in airports worldwide, they do self service check in.
Uncategorized
23
Posts
3
Posters
2
Views
-
ARINC SelfServ vMUSE devices are down in airports worldwide, they do self service check in. They’re connected to navAviNet aka ARINC Ground Network, managed by Collins Aerospace, who are owned by RTX.
An attacker got onto to the shared network.
-
ARINC SelfServ vMUSE devices are down in airports worldwide, they do self service check in. They’re connected to navAviNet aka ARINC Ground Network, managed by Collins Aerospace, who are owned by RTX.
An attacker got onto to the shared network.
RTX is Raytheon btw, a large cybersecurity provider. Looking into it.. but so far, looks like e-crime.
-
RTX is Raytheon btw, a large cybersecurity provider. Looking into it.. but so far, looks like e-crime.
The systems impacted are in ARINC Multi-User System Environment (MUSE™) aka Rockwell Collins’ ARINC vMUSE™. This is like the corporate centipede of acquisitions!
-
The systems impacted are in ARINC Multi-User System Environment (MUSE™) aka Rockwell Collins’ ARINC vMUSE™. This is like the corporate centipede of acquisitions!
Shodan dork if you wanna rubberneck:
org:"ARINC INCORPORATED"
6x AnyConnect VPN boxes offline
-
Shodan dork if you wanna rubberneck:
org:"ARINC INCORPORATED"
6x AnyConnect VPN boxes offline
BBC good reporting on the ground impact
In theory it should be minimal but in practice airlines have automated many jobs so we’ll see.
-
BBC good reporting on the ground impact
In theory it should be minimal but in practice airlines have automated many jobs so we’ll see.
@GossiTheDog Given how much airlines are pushing people towards self service check-in and as a result how few staff they have on check-in desks in some cases…
I’m not sure it will be quite such a minimal impact
-
@GossiTheDog Given how much airlines are pushing people towards self service check-in and as a result how few staff they have on check-in desks in some cases…
I’m not sure it will be quite such a minimal impact
@cirriustech @GossiTheDog agree, this will likely expand in short time.
-
BBC good reporting on the ground impact
In theory it should be minimal but in practice airlines have automated many jobs so we’ll see.
The media are reporting this is impacting 3 airports, but it's actually more - the 3 airports are main transport hubs so building up backlogs (eg Heathrow is at 50% delayed flights now) but there's others, they're just smaller.
-
The media are reporting this is impacting 3 airports, but it's actually more - the 3 airports are main transport hubs so building up backlogs (eg Heathrow is at 50% delayed flights now) but there's others, they're just smaller.
The most surprising element so far is ARINC didn't tell Heathrow it was cyber related for almost 15 hours.
-
@cirriustech @GossiTheDog agree, this will likely expand in short time.
@cirriustech @GossiTheDog here are the “top ten” airports using vMUSE. See any you recognize in Europe as listed in current incident ;)
1. London Heathrow (LHR)
2. Glasgow Airport (GLA)
3. Berlin Schönefeld (SXF)
4. Dublin Airport (DUB)
5. Cork Airport (ORK)
6. Cologne Bonn Airport (CGN)
7. Mazatlán International Airport (Mexico)
8. Zihuatanejo International Airport (Mexico)
9. Monterrey International Airport (Mexico)
10. Velana International Airport (Maldiverne) -
The most surprising element so far is ARINC didn't tell Heathrow it was cyber related for almost 15 hours.
If any journalists want a list of top impacted airports to check: https://infosec.exchange/@nieldk/115237394885804514
BBC have Dublin and Cork added.
-
If any journalists want a list of top impacted airports to check: https://infosec.exchange/@nieldk/115237394885804514
BBC have Dublin and Cork added.
ARINC collect passenger biometric data on vMUSE, which is the system which has been impacted (the user identity database in particular, hence why airline staff can't log in either).
-
ARINC collect passenger biometric data on vMUSE, which is the system which has been impacted (the user identity database in particular, hence why airline staff can't log in either).
Here’s where it began this time yesterday, before the whole thing tumbled off a cliff.
-
Here’s where it began this time yesterday, before the whole thing tumbled off a cliff.
honey i've opened the door to 1998
-
honey i've opened the door to 1998
ARINC hope to have vMUSE back online shortly, they’re restoring their Windows environment from backup. Somebody got Domain Admin and totalled it.
-
ARINC hope to have vMUSE back online shortly, they’re restoring their Windows environment from backup. Somebody got Domain Admin and totalled it.
ARINC are flying engineers out to airports to try to fix terminals.
Brussels airport, EBBR, have issued this NOTAM: “AD LTD DUE TO AN IT SYSTEM DISRUPTION. AIRLINES ARE TO CANCEL 50
PERCENT OF THEIR DEPARTING PASSENGER FLIGHTS IN THIS TIMEFRAME” -
ARINC are flying engineers out to airports to try to fix terminals.
Brussels airport, EBBR, have issued this NOTAM: “AD LTD DUE TO AN IT SYSTEM DISRUPTION. AIRLINES ARE TO CANCEL 50
PERCENT OF THEIR DEPARTING PASSENGER FLIGHTS IN THIS TIMEFRAME”The ARINC incident continues https://www.bbc.co.uk/news/articles/cwy88857llno
Also for anybody interested, ARINC is where the cyber incident is.
ARINC were basically the OG airport network provider, from 1929. ARNIC were sold to Carlyle Group (private equity) in 2007, who sold them to Rockwell Collins in 2013, who sold to United Technologies in 2018, who merged to form Collins Aerospace. Their network looks a mess of US corporate shenanigans… webmail doesn’t even require https yet 😅
-
The ARINC incident continues https://www.bbc.co.uk/news/articles/cwy88857llno
Also for anybody interested, ARINC is where the cyber incident is.
ARINC were basically the OG airport network provider, from 1929. ARNIC were sold to Carlyle Group (private equity) in 2007, who sold them to Rockwell Collins in 2013, who sold to United Technologies in 2018, who merged to form Collins Aerospace. Their network looks a mess of US corporate shenanigans… webmail doesn’t even require https yet 😅
Worth noting that airplanes are incredibly safe and resilient after extensive regulation and open and transparent investigations of every air incident…
when you land on the ground, however, air travel is caught in the same cybersecurity bullshit every other industry is caught up in.
-
Worth noting that airplanes are incredibly safe and resilient after extensive regulation and open and transparent investigations of every air incident…
when you land on the ground, however, air travel is caught in the same cybersecurity bullshit every other industry is caught up in.
The incident continues https://www.bbc.co.uk/news/articles/cqjeej85452o
-
The incident continues https://www.bbc.co.uk/news/articles/cqjeej85452o
The ARINC incident is likely to continue through the week. They haven’t yet got the threat out of the network.
Gli ultimi otto messaggi ricevuti dalla Federazione
-
Il rito della Finanziaria
@anarchia
Cambiano i governi ma le finanziarie rimangono. Rimangono uguali a loro stesse: un miscuglio di tagli e incentivi di varia natura, per lo più alla produzione, che servono a rientrare nei parametri dell’austerità europea e a mantenere immutato l’assetto politico...Vedi l'articolo
https://www.rivoluzioneanarchica.it/il-rito-della-finanziaria/
-
@ribby qualcosa su proxmox?
-
@demofox anyways on the reversing a linked list challenge, I want to say that I asked them what the requirements would be eg context of its use and the interviewer was like :) no just come up with something impress us :) :) but I might be misremembering as that was ~10 years ago.
-
@demofox tbh it was good to have bombed that one because it helped me realize I should brush up on my c++ before applying for any of the jobs I actually wanted
-
@demofox a long long time ago last time I was unemployed and job hunting I had an interview with apple and they asked me to reverse a linked list. so I said I'd use whatever library function is available. interviewer said no, pretend there isn't one. then I gave them a naive O(N) solution and then the interviewer said it was no good because it used recursion and thus too much stack memory and what if the device didn't have enough memory?!
-
@shanecelis lol I laughed in real life
-
@demofox INTERVIEWER: Can you reverse a string?
ME, pulling a string from my pocket: Of course.
-
@demofox Oh, that's easy. Just perform a complex valued DFT of the byte values twice in a row. It's O(n log n) so it's even *relatively* efficient.
