European Airport Cyberattack Linked to Obscure Ransomware, Suspect Arrested

European Airport Cyberattack Linked to Obscure Ransomware, Suspect Arrested ties the incident at Collins Aerospace to the HardBit ransomware, which researchers say emerged in October 2022 and operates largely via an affiliate model. According to SecurityWeek, ENISA revealed the disruptions were the result of a ransomware attack, while cyber commentator Kevin Beaumont described the HardBit variant as “incredibly basic” and noted difficulties removing the malware.

The BBC reported that over one thousand computers may have been affected, with attackers still inside Collins Aerospace’ network after systems were rebuilt and relaunched. A 40-year-old man was arrested in West Sussex as part of the investigation, though he was released on bail and the inquiry remains in its early stages, according to the National Crime Agency.

The attack has disrupted major European airports, including London Heathrow, Brussels Airport, and Berlin Brandenburg, with delays and cancellations extending into Wednesday. Some SecurityWeek sources also indicated that collateral ties to groups such as Scattered Spider and the BianLian operation were discussed, though attribution remains uncertain.