NATO Secret Missile Data Found On The Dark Web

NATO is urgently investigating a data leak, including blueprints of sophisticated weapons, that have evidently been stolen for European missile systems firm MBDA.  In August, the French missile producer acknowledged that it had been the subject of a blackmail attempt purported by a criminal group and hackers have placed the stolen data for sale on the Dark Web

MBDA confirms that the data for sale does belong to them and that the breach appears to have been in the form of a ransomware attack. They say the stolen data was acquired from a compromised external hard drive, rather than internal networks. It is understood investigations are centered on one of MBDA's suppliers.

MBDA Missile Systems headquarters are located in France and sells weapons to several different NATO countries.  Last year it posted revenue of £3.5bn and counts the British Ministry of Defence, the US military and NATO as customers for its weapons systems. The company was created in December 2001 after the merger of missile systems companies in France, Italy and the UK and is the world’s second largest manufacturer of missiles. The company has manufacturing plants in France, Italy, Britain, and Spain and employs over 13,000 people.

MBDA has three main product lines: air-to-air missiles, air-to-surface missiles, and surface-to-air missiles. Its products are used by the militaries of more than 40 countries. 

MBDA was the subject of a blackmail attempt by a criminal group that falsely claims to have hacked the company’s information networks. Following the company’s refusal to yield to this blackmail threat and pay a ransom demand, the criminal group has spread information on the Internet, making it accessible for a payment. This failed ransom attempt is the subject of an investigation by the Italian security agencies.

The company refused to submit to a ransom demand and the alleged non-classified information was subsequently leaked online. The data for sale on both Russian and English-language forums and consists of 80GB and is currently listed for 15 bitcoins, worth around $300,000. The cyber criminals are understood to have already sold the data to at least one buyer.

MBDA Systems:     Oodaloop:   Dark Reading:   BBC:    HackreadFortune

You Might Also Read: 

Killnet Turn Their Attention To Lockheed Martin:


 

« Dutch Town Sues Twitter For Paedophile Conspiracy
DARPA Wants To Play With Artificial Intelligence »

Quartz Conference
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Clayden Law

Clayden Law

Clayden Law are experts in information technology, data privacy and cybersecurity law.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

BackupVault

BackupVault

BackupVault is a leading provider of completely automatic, fully encrypted online, cloud backup.

InteliSecure

InteliSecure

InteliSecure offer Professional Services, Security Assessments and Managed Services for data and threat protection.

UM Labs

UM Labs

UM Labs is a developer of security products for Voice over IP (VoIP), protecting SIP trunk connections, safeguarding mobile phone communications and enabling BYOD.

Atempo

Atempo

Atempo is a leading independent European-based software vendor with an established global presence providing solutions to protect, store, move and recover all mission-critical data.

Intelligent Business Solutions Cyprus (IBSCY)

Intelligent Business Solutions Cyprus (IBSCY)

IBSCY Ltd is a leading provider of total IT solutions and services in Cyprus specializing in the areas of cloud services and applications, systems integration, IT infrastructure and security.

Red Snapper Recruitment

Red Snapper Recruitment

Red Snapper Recruitment is a market leading staffing services provider to the law enforcement, cyber security, offender supervision and regulatory services markets.

Rigado

Rigado

Rigado's mission is to enable commercial IoT success by providing high-performance secure and scalable wireless edge connectivity and network infrastructure.

PeopleSec

PeopleSec

PeopleSec specializes in the human element of cybersecurity with a comprehensive set of services designed to maximize your security by educating your workforce as a whole.

TROOPERS

TROOPERS

TROOPERS InfoSec event consists of two days of high-end training, followed by a two-day, three-track conference, culminating in Roundtables on the final day.

QNu Labs

QNu Labs

QNu Labs’s quantum-safe cryptography products and solutions assure unconditional security of critical data on the internet and cloud across all industry verticals, globally.

Aligned Technology Solutions (ATS)

Aligned Technology Solutions (ATS)

ATS manage, monitor, and maintain everything from your network and servers to your workstations and mobile devices, and we do it proactively to eliminate downtime and keep hackers at bay.

CY4GATE

CY4GATE

CY4GATE was conceived to design, develop and produce technologies and products that are able to meet the most stringent and modern requirements of Cyber Intelligence & Cyber Security.

BluescreenIT (BIT)

BluescreenIT (BIT)

BluescreenIT is an IT Security Consultancy and IT and Cyber Security Training company supporting industry, local authorities, MoD and governmental IT departments.

Raxis

Raxis

Raxis is a cybersecurity company that hacks into computer networks and physical structures to perform penetration tests, assessing corporate vulnerability to real-world threats.

Scholarly Networks Security Initiative (SNSI)

Scholarly Networks Security Initiative (SNSI)

SNSI brings together publishers and institutions to solve cyber-challenges threatening the integrity of the scientific record, scholarly systems and the safety of personal data.

Swish Data Corp.

Swish Data Corp.

Swish delivers when the problems are complex, requirements are difficult, and the mission is absolutely critical.

VinCSS

VinCSS

VinCSS Internet Security Services JSC is a leading organization working in the field of researching, developing, producing products as well as providing cyber security services.