{"id":45298,"date":"2022-02-15T12:31:21","date_gmt":"2022-02-15T12:31:21","guid":{"rendered":"http:\/\/55b79189-45ff-4aaa-bffa-69fea8b62f7a"},"modified":"2022-02-15T12:31:21","modified_gmt":"2022-02-15T12:31:21","slug":"warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/","title":{"rendered":"Warning over mysterious hackers that have been targeting aerospace and defence industries for years"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/a\/img\/resize\/35607fdf2c12ff0da901d72d8b8c58e2afe01283\/2022\/02\/15\/07cd8bd0-03bc-4946-b3bc-2affc42bf7e8\/getty-plane-cockpit.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\" class=\"ff-og-image-inserted\"><\/div>\n<p>An unknown criminal hacking group is targeting organisations in the aviation, aerospace, defence, transportation and manufacturing industries with trojan malware, in attacks that researchers say have been going on for years.<\/p>\n<p>Dubbed TA2541 and <a href=\"https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/charting-ta2541s-flight\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">detailed by cybersecurity researchers at Proofpoint<\/a>, the persistent cyber-criminal operation has been active since 2017 and has compromised hundreds of organisations across North America, Europe, and the Middle East.<\/p>\n<div class=\"relatedContent alignRight\">\n<h3 class=\"heading\"> <span class=\"int\">ZDNet Recommends<\/span> <\/h3>\n<\/p><\/div>\n<p>Despite running for years, the attacks have barely evolved, broadly following the same targeting and themes in which attackers remotely control compromised machines, conduct reconnaissance on networks and steal sensitive data.&nbsp;<\/p>\n<p><strong><strong>SEE:&nbsp;<\/strong><a href=\"http:\/\/www.zdnet.com\/topic\/a-winning-strategy-for-cybersecurity\/#link=%7B%22role%22:%22standard%22,%22href%22:%22http:\/\/www.zdnet.com\/topic\/a-winning-strategy-for-cybersecurity\/%22,%22target%22:%22_blank%22,%22absolute%22:%22%22,%22linkText%22:%22%3Cstrong%3EA%20winning%20strategy%20for%20cybersecurity%3C\/strong%3E%22%7D\"><strong>A winning strategy for cybersecurity<\/strong><\/a><strong>&nbsp;(ZDNet special report)<\/strong><\/strong><\/p>\n<p>&#8220;What&#8217;s noteworthy about TA2541 is how little they&#8217;ve changed their approach to cybercrime over the past five years, repeatedly using the same themes, often related to aviation, aerospace, and transportation, to distribute remote access trojans,&#8221; said Sherrod DeGrippo, vice president of threat research and Detection at Proofpoint.&nbsp;<\/p>\n<p>&#8220;This group is a persistent threat to targets throughout the transportation, logistics, and travel industries.&#8221;<\/p>\n<p>Attacks begin with <a href=\"https:\/\/www.zdnet.com\/article\/what-is-phishing-how-to-protect-yourself-from-scam-emails-and-more\/\" target=\"_blank\" rel=\"noopener\">phishing emails<\/a> designed to be relevant to individuals and businesses in the sectors being targeted. For example, one lure sent to targets in aviation and aerospace resembles requests for aircraft parts, while another is designed to look like an urgent request for air ambulance flight details. At one point,&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/pandemic-threats-the-common-threads-in-covid-19-scams-criminal-schemes\/\" target=\"_blank\" rel=\"noopener\">the attackers introduced COVID-19-themed lures<\/a>, although these were soon dropped.<\/p>\n<section class=\"sharethrough-top placeholder\"> <\/section>\n<p>While the lures aren&#8217;t highly customised and follow regular templates, the sheer number of messages sent over the years \u2013 hundreds of thousands in total \u2013 and their implied urgency will be enough to fool victims into downloading <a href=\"https:\/\/www.zdnet.com\/article\/what-is-malware-everything-you-need-to-know-about-viruses-trojans-and-malicious-software\/\" target=\"_blank\" rel=\"noopener\">malware<\/a>. The messages are nearly always in English.&nbsp; <\/p>\n<p>TA2541 initially sent emails containing macro-laden Microsoft Word attachments that downloaded the <a href=\"https:\/\/www.zdnet.com\/article\/trojan-malware-the-hidden-cyber-threat-to-your-pc\/\" target=\"_blank\" rel=\"noopener\">Remote Access Trojan<\/a> (RAT) payload, but the group has recently shifted to using Google Drive and Microsoft OneDrive URLs, which lead to an obfuscated Visual Basic Script (VBS) file. &nbsp;<\/p>\n<p>Interacting with these files \u2013 the names of which follow similar themes to the initial lures \u2013 will leverage PowerShell functions to download malware onto compromised Windows machines.&nbsp;<\/p>\n<p>The cyber criminals have distributed over a dozen different trojan malware payloads since the campaigns began, all of which are available to buy on dark web forums or can be downloaded from <a href=\"https:\/\/www.zdnet.com\/article\/free-easy-to-use-and-available-to-anyone-the-powerful-malware-hiding-in-plain-sight-on-the-open-web\/\" target=\"_blank\" rel=\"noopener\">open-source<\/a> repositories. &nbsp;<\/p>\n<p>Currently, the most commonly delivered malware in TA2541 campaigns is <a href=\"https:\/\/www.zdnet.com\/article\/remote-access-trojans-spread-through-microsoft-azure-aws-cloud-service-abuse\/\" target=\"_blank\" rel=\"noopener\">AsyncRAT<\/a>, but other popular payloads include <a href=\"https:\/\/www.zdnet.com\/article\/in-new-enterprise-attack-wave-netwire-rat-trojan-buries-itself-in-image-files\/\" target=\"_blank\" rel=\"noopener\">NetWire<\/a>, <a href=\"https:\/\/www.zdnet.com\/article\/when-one-isnt-enough-this-shady-malware-will-infect-your-pc-with-two-trojans\/\" target=\"_blank\" rel=\"noopener\">WSH RAT<\/a> and Parallax.&nbsp;<\/p>\n<p>No matter which malware is delivered, it&#8217;s used to gain remote control of infected machines and steal data, although researchers note that they still don&#8217;t know what the ultimate goal of the group is, or where they are operating from.&nbsp;<\/p>\n<p>The campaign is still active and it&#8217;s been warned that the attackers will continue to distribute phishing emails and deliver malware to victims around the world. &nbsp;<\/p>\n<h3><strong>MORE ON CYBERSECURITY<\/strong><\/h3>\n<p> READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/these-prolific-hackers-have-been-targeting-the-aerospace-and-defence-industries-with-trojan-malware-for-years\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybersecurity researchers detail a hacking operation that has been conducting phishing campaigns and malware attacks since 2017, despite barely changing its tactics.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-45298","post","type-post","status-publish","format-standard","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Warning over mysterious hackers that have been targeting aerospace and defence industries for years 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Warning over mysterious hackers that have been targeting aerospace and defence industries for years 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2022-02-15T12:31:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.zdnet.com\/a\/img\/resize\/35607fdf2c12ff0da901d72d8b8c58e2afe01283\/2022\/02\/15\/07cd8bd0-03bc-4946-b3bc-2affc42bf7e8\/getty-plane-cockpit.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Warning over mysterious hackers that have been targeting aerospace and defence industries for years\",\"datePublished\":\"2022-02-15T12:31:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\\\/\"},\"wordCount\":499,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/35607fdf2c12ff0da901d72d8b8c58e2afe01283\\\/2022\\\/02\\\/15\\\/07cd8bd0-03bc-4946-b3bc-2affc42bf7e8\\\/getty-plane-cockpit.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\\\/\",\"name\":\"Warning over mysterious hackers that have been targeting aerospace and defence industries for years 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/35607fdf2c12ff0da901d72d8b8c58e2afe01283\\\/2022\\\/02\\\/15\\\/07cd8bd0-03bc-4946-b3bc-2affc42bf7e8\\\/getty-plane-cockpit.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\",\"datePublished\":\"2022-02-15T12:31:21+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/35607fdf2c12ff0da901d72d8b8c58e2afe01283\\\/2022\\\/02\\\/15\\\/07cd8bd0-03bc-4946-b3bc-2affc42bf7e8\\\/getty-plane-cockpit.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\",\"contentUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/35607fdf2c12ff0da901d72d8b8c58e2afe01283\\\/2022\\\/02\\\/15\\\/07cd8bd0-03bc-4946-b3bc-2affc42bf7e8\\\/getty-plane-cockpit.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Warning over mysterious hackers that have been targeting aerospace and defence industries for years\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Warning over mysterious hackers that have been targeting aerospace and defence industries for years 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/","og_locale":"en_US","og_type":"article","og_title":"Warning over mysterious hackers that have been targeting aerospace and defence industries for years 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2022-02-15T12:31:21+00:00","og_image":[{"url":"https:\/\/www.zdnet.com\/a\/img\/resize\/35607fdf2c12ff0da901d72d8b8c58e2afe01283\/2022\/02\/15\/07cd8bd0-03bc-4946-b3bc-2affc42bf7e8\/getty-plane-cockpit.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Warning over mysterious hackers that have been targeting aerospace and defence industries for years","datePublished":"2022-02-15T12:31:21+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/"},"wordCount":499,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/35607fdf2c12ff0da901d72d8b8c58e2afe01283\/2022\/02\/15\/07cd8bd0-03bc-4946-b3bc-2affc42bf7e8\/getty-plane-cockpit.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/","url":"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/","name":"Warning over mysterious hackers that have been targeting aerospace and defence industries for years 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/35607fdf2c12ff0da901d72d8b8c58e2afe01283\/2022\/02\/15\/07cd8bd0-03bc-4946-b3bc-2affc42bf7e8\/getty-plane-cockpit.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp","datePublished":"2022-02-15T12:31:21+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/#primaryimage","url":"https:\/\/www.zdnet.com\/a\/img\/resize\/35607fdf2c12ff0da901d72d8b8c58e2afe01283\/2022\/02\/15\/07cd8bd0-03bc-4946-b3bc-2affc42bf7e8\/getty-plane-cockpit.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp","contentUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/35607fdf2c12ff0da901d72d8b8c58e2afe01283\/2022\/02\/15\/07cd8bd0-03bc-4946-b3bc-2affc42bf7e8\/getty-plane-cockpit.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/warning-over-mysterious-hackers-that-have-been-targeting-aerospace-and-defence-industries-for-years\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Warning over mysterious hackers that have been targeting aerospace and defence industries for years"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/45298","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=45298"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/45298\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=45298"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=45298"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=45298"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}