From Airport chaos to cyber intrigue: Everest Gang takes credit for Collins Aerospace breach

According to Security Affairs, the Everest ransomware gang has claimed responsibility for a breach at Collins Aerospace, with their leak site going offline almost immediately afterward, displaying a “Fatal error” message and prompting takedown speculation. The incident follows a prior cyberattack that disrupted check-in and boarding systems at major European airports, including Heathrow, Brussels, and Berlin, forcing numerous flight delays and cancellations.

The breaches targeted Collins Aerospace, a subsidiary of RTX, and the attack allegedly affected Collins’ Muse software, underscoring how supply chain intrusions can impact critical aviation and defence infrastructure. The Everest gang is described as operating a hybrid model, acting as brokers and partnering with affiliates, and their leak-site disappearance adds a layer of mystery to the unfolding event.

This emphasises the evolving nature of ransomware as a geopolitical tool that can threaten national resilience through attacks on essential suppliers, not just financial extortion.