AI Suspected In Ransomware Cyberattack Disrupting Major European Airports

Ransomware attacks have disrupted major European airports, including London Heathrow, Berlin Brandenburg, and Brussels. These cyberattacks affected passenger check-in systems, leading to flight cancellations and widespread delays. The European Union's cybersecurity agency, ENISA, confirmed that Collins Aerospace, owned by RTX, was targeted in this ransomware attack. However, the origin of the attack remains unknown.

Passengers are advised to verify their flight status before heading to the airport. It's recommended to arrive two hours early for Schengen flights and three hours for non-Schengen routes. Brussels Airlines suggested online check-in as their systems were unaffected by the cyberattack.

The outage primarily impacted check-in and baggage drop services, affecting numerous flights since Friday. Testachats, a consumer protection group, stated that passengers with cancelled flights due to the cyberattack can receive a free alternative or a full refund. However, financial compensation is not available as the disruption is considered force majeure.

Airlines must still assist passengers facing long delays by providing meals and hotel accommodations if needed. This ensures that travellers are supported despite the challenging circumstances caused by the cyberattack.

Rafe Pilling from Sophos explained that most ransomware activities focus on extortion through data encryption and theft. Cybercriminals use malicious software to encrypt company data and demand payment for its release. They often avoid high-profile targets to escape law enforcement attention.

Christian Perry of Undetectable AI highlighted how hackers now leverage AI for more efficient attacks. "In this sort of attack, AI can do the heavy lifting that used to take hackers weeks," he said. AI scans vast systems quickly for vulnerabilities and mimics user behaviour to avoid detection.

AI's Dual Role in Cybersecurity

Perry noted that AI could also be used defensively against such threats: "It’s not all doom and gloom. AI can be trained to work on our side too – spotting unusual patterns, picking up threats faster than any human team." This dual role of AI offers hope in combating cyber threats effectively.

Perry warned that similar methods could target other critical sectors like hospitals, banks, public transport, and emergency services. The potential impact highlights the need for robust cybersecurity measures across various industries.

This incident underscores the growing threat of ransomware attacks on essential infrastructure worldwide. As technology evolves, both attackers and defenders must adapt strategies to protect vital systems from these sophisticated threats.

With inputs from WAM