ARINC SelfServ vMUSE devices are down in airports worldwide, they do self service check in.
Uncategorized
23
Posts
3
Posters
2
Views
-
ARINC SelfServ vMUSE devices are down in airports worldwide, they do self service check in. They’re connected to navAviNet aka ARINC Ground Network, managed by Collins Aerospace, who are owned by RTX.
An attacker got onto to the shared network.
-
ARINC SelfServ vMUSE devices are down in airports worldwide, they do self service check in. They’re connected to navAviNet aka ARINC Ground Network, managed by Collins Aerospace, who are owned by RTX.
An attacker got onto to the shared network.
RTX is Raytheon btw, a large cybersecurity provider. Looking into it.. but so far, looks like e-crime.
-
RTX is Raytheon btw, a large cybersecurity provider. Looking into it.. but so far, looks like e-crime.
The systems impacted are in ARINC Multi-User System Environment (MUSE™) aka Rockwell Collins’ ARINC vMUSE™. This is like the corporate centipede of acquisitions!
-
The systems impacted are in ARINC Multi-User System Environment (MUSE™) aka Rockwell Collins’ ARINC vMUSE™. This is like the corporate centipede of acquisitions!
Shodan dork if you wanna rubberneck:
org:"ARINC INCORPORATED"
6x AnyConnect VPN boxes offline
-
Shodan dork if you wanna rubberneck:
org:"ARINC INCORPORATED"
6x AnyConnect VPN boxes offline
BBC good reporting on the ground impact
In theory it should be minimal but in practice airlines have automated many jobs so we’ll see.
-
BBC good reporting on the ground impact
In theory it should be minimal but in practice airlines have automated many jobs so we’ll see.
@GossiTheDog Given how much airlines are pushing people towards self service check-in and as a result how few staff they have on check-in desks in some cases…
I’m not sure it will be quite such a minimal impact
-
@GossiTheDog Given how much airlines are pushing people towards self service check-in and as a result how few staff they have on check-in desks in some cases…
I’m not sure it will be quite such a minimal impact
@cirriustech @GossiTheDog agree, this will likely expand in short time.
-
BBC good reporting on the ground impact
In theory it should be minimal but in practice airlines have automated many jobs so we’ll see.
The media are reporting this is impacting 3 airports, but it's actually more - the 3 airports are main transport hubs so building up backlogs (eg Heathrow is at 50% delayed flights now) but there's others, they're just smaller.
-
The media are reporting this is impacting 3 airports, but it's actually more - the 3 airports are main transport hubs so building up backlogs (eg Heathrow is at 50% delayed flights now) but there's others, they're just smaller.
The most surprising element so far is ARINC didn't tell Heathrow it was cyber related for almost 15 hours.
-
@cirriustech @GossiTheDog agree, this will likely expand in short time.
@cirriustech @GossiTheDog here are the “top ten” airports using vMUSE. See any you recognize in Europe as listed in current incident ;)
1. London Heathrow (LHR)
2. Glasgow Airport (GLA)
3. Berlin Schönefeld (SXF)
4. Dublin Airport (DUB)
5. Cork Airport (ORK)
6. Cologne Bonn Airport (CGN)
7. Mazatlán International Airport (Mexico)
8. Zihuatanejo International Airport (Mexico)
9. Monterrey International Airport (Mexico)
10. Velana International Airport (Maldiverne) -
The most surprising element so far is ARINC didn't tell Heathrow it was cyber related for almost 15 hours.
If any journalists want a list of top impacted airports to check: https://infosec.exchange/@nieldk/115237394885804514
BBC have Dublin and Cork added.
-
If any journalists want a list of top impacted airports to check: https://infosec.exchange/@nieldk/115237394885804514
BBC have Dublin and Cork added.
ARINC collect passenger biometric data on vMUSE, which is the system which has been impacted (the user identity database in particular, hence why airline staff can't log in either).
-
ARINC collect passenger biometric data on vMUSE, which is the system which has been impacted (the user identity database in particular, hence why airline staff can't log in either).
Here’s where it began this time yesterday, before the whole thing tumbled off a cliff.
-
Here’s where it began this time yesterday, before the whole thing tumbled off a cliff.
honey i've opened the door to 1998
-
honey i've opened the door to 1998
ARINC hope to have vMUSE back online shortly, they’re restoring their Windows environment from backup. Somebody got Domain Admin and totalled it.
-
ARINC hope to have vMUSE back online shortly, they’re restoring their Windows environment from backup. Somebody got Domain Admin and totalled it.
ARINC are flying engineers out to airports to try to fix terminals.
Brussels airport, EBBR, have issued this NOTAM: “AD LTD DUE TO AN IT SYSTEM DISRUPTION. AIRLINES ARE TO CANCEL 50
PERCENT OF THEIR DEPARTING PASSENGER FLIGHTS IN THIS TIMEFRAME” -
ARINC are flying engineers out to airports to try to fix terminals.
Brussels airport, EBBR, have issued this NOTAM: “AD LTD DUE TO AN IT SYSTEM DISRUPTION. AIRLINES ARE TO CANCEL 50
PERCENT OF THEIR DEPARTING PASSENGER FLIGHTS IN THIS TIMEFRAME”The ARINC incident continues https://www.bbc.co.uk/news/articles/cwy88857llno
Also for anybody interested, ARINC is where the cyber incident is.
ARINC were basically the OG airport network provider, from 1929. ARNIC were sold to Carlyle Group (private equity) in 2007, who sold them to Rockwell Collins in 2013, who sold to United Technologies in 2018, who merged to form Collins Aerospace. Their network looks a mess of US corporate shenanigans… webmail doesn’t even require https yet 😅
-
The ARINC incident continues https://www.bbc.co.uk/news/articles/cwy88857llno
Also for anybody interested, ARINC is where the cyber incident is.
ARINC were basically the OG airport network provider, from 1929. ARNIC were sold to Carlyle Group (private equity) in 2007, who sold them to Rockwell Collins in 2013, who sold to United Technologies in 2018, who merged to form Collins Aerospace. Their network looks a mess of US corporate shenanigans… webmail doesn’t even require https yet 😅
Worth noting that airplanes are incredibly safe and resilient after extensive regulation and open and transparent investigations of every air incident…
when you land on the ground, however, air travel is caught in the same cybersecurity bullshit every other industry is caught up in.
-
Worth noting that airplanes are incredibly safe and resilient after extensive regulation and open and transparent investigations of every air incident…
when you land on the ground, however, air travel is caught in the same cybersecurity bullshit every other industry is caught up in.
The incident continues https://www.bbc.co.uk/news/articles/cqjeej85452o
-
The incident continues https://www.bbc.co.uk/news/articles/cqjeej85452o
The ARINC incident is likely to continue through the week. They haven’t yet got the threat out of the network.
Gli ultimi otto messaggi ricevuti dalla Federazione
-
Per i giorni in cui sarò là ho visto che sono previste serate con musica dal vivo, ma non si tratta di musica tradizionale.
Farò il possibile 🙂
-
@francina1909 @kristiana sì alla grandissima 👍🏻 ciao Fran 🤗
-
@noybeu Thank you!!!!!
-
⚖️🚨 Today, noyb has filed a criminal complaint against Clearview AI. Despite several bans and fines, Clearview hasn't changed its illegal practices. If successful, Clearview AI and its executives could face jail time and be held personally liable.
https://noyb.eu/en/criminal-complaint-against-facial-recognition-company-clearview-ai
-
#Ucraina #analisimilitare dal minuto 40 in poi
-
@falkheiland oh god no, I just need to verify if the gate exists 2 hrs before I fly. You know, like a normal person.
-
@nicolaottomano @filippodb @societa Personalmente preferisco la crema di Venchi, che per me rappresenta il top mondiale della cioccolateria industriale. Ma bisogna essere sinceri: il product Manager della Nutella ha fatto un miracolo perché ha lavorato sull'individuazione del gusto medio dell'utente, sulla spalmabilità ottimale e sulla consistenza della crema che regge Benissimo sia a temperatura ambiente sia a fronte di un leggero riscaldamento. Ecco perché Nutella è leader del settore
-
@nicolaottomano @societa poi hai ragione, evidentemente all'inizio avevano tentato la "furbata" per poi correggere il tiro e fare effettivamente qualcosa di qualitativamente migliore.
Poi per carità c'è chi non sente le differenze e gli va bene la novi ma io trovo una differenza enorme ripetto alla novi e alle altre (la nutella la considero un pastone marrone di grassi low cost e zuccheri 😄 )
