ARINC SelfServ vMUSE devices are down in airports worldwide, they do self service check in.
Uncategorized
23
Posts
3
Posters
2
Views
-
ARINC SelfServ vMUSE devices are down in airports worldwide, they do self service check in. They’re connected to navAviNet aka ARINC Ground Network, managed by Collins Aerospace, who are owned by RTX.
An attacker got onto to the shared network.
-
ARINC SelfServ vMUSE devices are down in airports worldwide, they do self service check in. They’re connected to navAviNet aka ARINC Ground Network, managed by Collins Aerospace, who are owned by RTX.
An attacker got onto to the shared network.
RTX is Raytheon btw, a large cybersecurity provider. Looking into it.. but so far, looks like e-crime.
-
RTX is Raytheon btw, a large cybersecurity provider. Looking into it.. but so far, looks like e-crime.
The systems impacted are in ARINC Multi-User System Environment (MUSE™) aka Rockwell Collins’ ARINC vMUSE™. This is like the corporate centipede of acquisitions!
-
The systems impacted are in ARINC Multi-User System Environment (MUSE™) aka Rockwell Collins’ ARINC vMUSE™. This is like the corporate centipede of acquisitions!
Shodan dork if you wanna rubberneck:
org:"ARINC INCORPORATED"
6x AnyConnect VPN boxes offline
-
Shodan dork if you wanna rubberneck:
org:"ARINC INCORPORATED"
6x AnyConnect VPN boxes offline
BBC good reporting on the ground impact
In theory it should be minimal but in practice airlines have automated many jobs so we’ll see.
-
BBC good reporting on the ground impact
In theory it should be minimal but in practice airlines have automated many jobs so we’ll see.
@GossiTheDog Given how much airlines are pushing people towards self service check-in and as a result how few staff they have on check-in desks in some cases…
I’m not sure it will be quite such a minimal impact
-
@GossiTheDog Given how much airlines are pushing people towards self service check-in and as a result how few staff they have on check-in desks in some cases…
I’m not sure it will be quite such a minimal impact
@cirriustech @GossiTheDog agree, this will likely expand in short time.
-
BBC good reporting on the ground impact
In theory it should be minimal but in practice airlines have automated many jobs so we’ll see.
The media are reporting this is impacting 3 airports, but it's actually more - the 3 airports are main transport hubs so building up backlogs (eg Heathrow is at 50% delayed flights now) but there's others, they're just smaller.
-
The media are reporting this is impacting 3 airports, but it's actually more - the 3 airports are main transport hubs so building up backlogs (eg Heathrow is at 50% delayed flights now) but there's others, they're just smaller.
The most surprising element so far is ARINC didn't tell Heathrow it was cyber related for almost 15 hours.
-
@cirriustech @GossiTheDog agree, this will likely expand in short time.
@cirriustech @GossiTheDog here are the “top ten” airports using vMUSE. See any you recognize in Europe as listed in current incident ;)
1. London Heathrow (LHR)
2. Glasgow Airport (GLA)
3. Berlin Schönefeld (SXF)
4. Dublin Airport (DUB)
5. Cork Airport (ORK)
6. Cologne Bonn Airport (CGN)
7. Mazatlán International Airport (Mexico)
8. Zihuatanejo International Airport (Mexico)
9. Monterrey International Airport (Mexico)
10. Velana International Airport (Maldiverne) -
The most surprising element so far is ARINC didn't tell Heathrow it was cyber related for almost 15 hours.
If any journalists want a list of top impacted airports to check: https://infosec.exchange/@nieldk/115237394885804514
BBC have Dublin and Cork added.
-
If any journalists want a list of top impacted airports to check: https://infosec.exchange/@nieldk/115237394885804514
BBC have Dublin and Cork added.
ARINC collect passenger biometric data on vMUSE, which is the system which has been impacted (the user identity database in particular, hence why airline staff can't log in either).
-
ARINC collect passenger biometric data on vMUSE, which is the system which has been impacted (the user identity database in particular, hence why airline staff can't log in either).
Here’s where it began this time yesterday, before the whole thing tumbled off a cliff.
-
Here’s where it began this time yesterday, before the whole thing tumbled off a cliff.
honey i've opened the door to 1998
-
honey i've opened the door to 1998
ARINC hope to have vMUSE back online shortly, they’re restoring their Windows environment from backup. Somebody got Domain Admin and totalled it.
-
ARINC hope to have vMUSE back online shortly, they’re restoring their Windows environment from backup. Somebody got Domain Admin and totalled it.
ARINC are flying engineers out to airports to try to fix terminals.
Brussels airport, EBBR, have issued this NOTAM: “AD LTD DUE TO AN IT SYSTEM DISRUPTION. AIRLINES ARE TO CANCEL 50
PERCENT OF THEIR DEPARTING PASSENGER FLIGHTS IN THIS TIMEFRAME” -
ARINC are flying engineers out to airports to try to fix terminals.
Brussels airport, EBBR, have issued this NOTAM: “AD LTD DUE TO AN IT SYSTEM DISRUPTION. AIRLINES ARE TO CANCEL 50
PERCENT OF THEIR DEPARTING PASSENGER FLIGHTS IN THIS TIMEFRAME”The ARINC incident continues https://www.bbc.co.uk/news/articles/cwy88857llno
Also for anybody interested, ARINC is where the cyber incident is.
ARINC were basically the OG airport network provider, from 1929. ARNIC were sold to Carlyle Group (private equity) in 2007, who sold them to Rockwell Collins in 2013, who sold to United Technologies in 2018, who merged to form Collins Aerospace. Their network looks a mess of US corporate shenanigans… webmail doesn’t even require https yet 😅
-
The ARINC incident continues https://www.bbc.co.uk/news/articles/cwy88857llno
Also for anybody interested, ARINC is where the cyber incident is.
ARINC were basically the OG airport network provider, from 1929. ARNIC were sold to Carlyle Group (private equity) in 2007, who sold them to Rockwell Collins in 2013, who sold to United Technologies in 2018, who merged to form Collins Aerospace. Their network looks a mess of US corporate shenanigans… webmail doesn’t even require https yet 😅
Worth noting that airplanes are incredibly safe and resilient after extensive regulation and open and transparent investigations of every air incident…
when you land on the ground, however, air travel is caught in the same cybersecurity bullshit every other industry is caught up in.
-
Worth noting that airplanes are incredibly safe and resilient after extensive regulation and open and transparent investigations of every air incident…
when you land on the ground, however, air travel is caught in the same cybersecurity bullshit every other industry is caught up in.
The incident continues https://www.bbc.co.uk/news/articles/cqjeej85452o
-
The incident continues https://www.bbc.co.uk/news/articles/cqjeej85452o
The ARINC incident is likely to continue through the week. They haven’t yet got the threat out of the network.
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@Linkshaender
che meraviglia!
buonanotte Armin 🌌
-
•
frugando nella scatola dei ricordi 🐾«la Mimì col Trottola»
mag.1991
-
@thatgiga
La perfezione ❤️
-
@Otttoz ecco finalmente spiegato il famoso detto "abitare nel culo del mondo"!
-
@ibrahim46 @aral
L'Italia è con voi 🍉🍉
-
Il tutto sempre oltre Happy🦋, che è molto oltre il "semplice" journaling...
---
Happy🦋 è il diario della felicità che ho creato e che vorrei compilare tutti i giorni
Agevolo linkino per chi ne vuole sapere di più → https://adriananselmo.it/happy-mappa-gratitudine-felicita/Per domande sono qui!
-
Nuovo "giochino": riassumere i mesi solo con sticker. Sembra tutto così futile, eppure è liberatorio: un modo per dire cose serie in modo leggero.
-
Send your message now and tell #Democrats they were not elected to fold. They were elected to fight for affordable #healthcare. https://click.actionnetwork.org/ss/c/u001.qUXRBnqZ7T8nxbpAcIVwoUsWLkUMWlo_0JmZttSlm38hEpOxW5JbSk-4TcBb3ShXzaEY4mFDXqfjF9HadFrBJWV06aL4qiKvadgiYoq9dJQe9ufSsZ4HSLGFrDBzpPpSNBlb4v5Wyw0icmo6lEdQaLMwuaJvm2kb0Nt7-AvHWsSwc6XXUyQnoYGlrFW2ug52psBGKalbhvTx5Ljuv1cel5beFNKwgDRq6Uvbdcco5Tho9AuSqoS_rYsU6mO2HK8dbhXX3MlTquEK5QWQtrecoBy8Uj--ln8YpSNm5dVHoHOfprHy_60gEBCO8wBYb2DIlFCTE6RkMBQslGlToMQ5Ivnzxv3WUK-TuEz8lsvFZw7kb-igocOA7bL08K9Ok1cenB80gm5PsnK0YQHWYsT8zhDGIEtNl-6vJwFVtbR4RpsuowQ053wMrRh2dzq9tYAxkz9RZw46RLuYsx5OWUqXvZrSaU0Nz1kIfxJympwlD73jeHu141X-SfnONXvslpiQCxLJc6V0s512CKnxjjEgw5RLjCtl31p84bWhSCv3Pe5uKnVX9ozwSKlSneT4IrQ0m59CJ6zfQWjPboRfgKRWCzpPSpzPJZTo8h0UJCPtVP8cRyK5VJ7CkWSR_5V3gLO1a5s7a5H3_-uizyXKpgUHQg/4l3/Pn1lttUwRZSn7a2WkQOIDA/h2/h001.pqf0C50U2bEmjD3lQHTGHpmMxqUwKQFFu4l6rV8jTX4
