{"id":29808,"date":"2025-09-22T07:31:50","date_gmt":"2025-09-22T11:31:50","guid":{"rendered":"https:\/\/worldjusticenews.com\/news\/?p=29808"},"modified":"2025-09-22T07:33:33","modified_gmt":"2025-09-22T11:33:33","slug":"eu-cyber-agency-says-airport-software-held-to-ransom-by-criminals","status":"publish","type":"post","link":"https:\/\/worldjusticenews.com\/news\/2025\/09\/22\/eu-cyber-agency-says-airport-software-held-to-ransom-by-criminals\/","title":{"rendered":"EU cyber agency says airport software held to ransom by criminals"},"content":{"rendered":"<div class=\"ssrcss-suhx0k-RichTextComponentWrapper ep2nwvo0\" data-component=\"text-block\">\n<div class=\"ssrcss-1o5p6v2-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\"><b class=\"ssrcss-1xjjfut-BoldText e5tfeyi3\">The EU&#8217;s cyber security agency says criminals are using ransomware to cause chaos in airports around the world.<\/b><\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">Several of Europe&#8217;s busiest airports have spent the past few days trying to restore normal operations, after a cyber-attack on Friday disrupted their automatic check-in and boarding software.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">The European Union Agency for Cybersecurity, ENISA, told the BBC on Monday that the malicious software was used to scramble automatic check-in systems.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">&#8220;The type of ransomware has been identified. Law enforcement is involved to investigate,&#8221; the agency said in a statement to news agency Reuters.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-suhx0k-RichTextComponentWrapper ep2nwvo0\" data-component=\"text-block\">\n<div class=\"ssrcss-1o5p6v2-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">It&#8217;s not known who is behind the attack, but criminal gangs often use ransomware to seriously disrupt their victims&#8217; systems and demand a ransom in bitcoin to reverse the damage.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">The BBC has seen internal crisis communications from staff inside Heathrow Airport which urges airlines to continue to use manual workarounds to board and check in passengers as the recovery is ongoing.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">Heathrow said on Sunday it was still working to resolve the issue, and apologised to customers who had faced delayed travel.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">It stressed &#8220;the vast majority of flights have continued to operate&#8221; and urged passengers to check their flight status before travelling to the airport.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">The BBC understands about half of the airlines flying from Heathrow were back online in some form by Sunday &#8211; including British Airways, which has been using a back-up system since Saturday.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-1o1fzgd-ComponentWrapper-HeadlineComponentWrapper egtrm1f0\" data-component=\"subheadline-block\">\n<h2 id=\"Continued-disruption\" class=\"ssrcss-pbttu9-Heading e10rt3ze0\" tabindex=\"-1\"><span role=\"text\">Continued disruption<\/span><\/h2>\n<\/div>\n<div class=\"ssrcss-suhx0k-RichTextComponentWrapper ep2nwvo0\" data-component=\"text-block\">\n<div class=\"ssrcss-1o5p6v2-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">The attack against US software maker Collins Aerospace was discovered on Friday night and resulted in disruption across several airports on Saturday.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">While this had eased significantly in Berlin and London Heathrow by Sunday, delays and flight cancellations remained.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">Brussels Airport, also affected, said the &#8220;service provider is actively working on the issue&#8221; but it was still &#8220;unclear&#8221; when the issue would be resolved.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">They have asked airlines to cancel nearly 140 of their 276 scheduled outbound flights for Monday, according to the AP news agency.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">Meanwhile, a Berlin Airport spokesperson told the BBC some airlines were still boarding passengers manually and it had no indication on how long the electronic outage would last.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-1wemwdx-LinksComponentWrapper e3eyuya0\" data-component=\"links-block\">\n<section class=\"ssrcss-1pwf8hf-LinksWrapper e3eyuya5\">\n<ul class=\"ssrcss-1y7vh23-InContentLinksGrid e3eyuya3\" role=\"list\">\n<li class=\"ssrcss-b9aks7-PromoItem e3eyuya1\">\n<div class=\"ssrcss-1t3sjik-Promo e1vyq2e80\" data-testid=\"promo\">\n<div class=\"ssrcss-oxzfb3-PromoCompact e18gnqux0\">\n<div class=\"ssrcss-85qg85-PromoContent exn3ah912\">\n<div class=\"ssrcss-espw6b-Stack e1y4nx260\">\n<p class=\"ssrcss-1sen9vx-PromoHeadline exn3ah99\"><a href=\"https:\/\/www.bbc.co.uk\/news\/articles\/c9qxnyengdjo\" target=\"_blank\" rel=\"noopener\"><span aria-hidden=\"false\">What are my rights if my flight is cancelled or delayed?<\/span><\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/li>\n<\/ul>\n<\/section>\n<\/div>\n<div class=\"ssrcss-suhx0k-RichTextComponentWrapper ep2nwvo0\" data-component=\"text-block\">\n<div class=\"ssrcss-1o5p6v2-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">It is understood that hackers behind the attack targeted a popular checking software called Muse.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">Collins Aerospace has not explained what happened or told the public how long things will take to be resolved. The company is still referring to it as a &#8216;cyber incident&#8217;.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">In a statement on Monday morning, the software provider said it was in the final stages of completing necessary software updates.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">The internal memo sent to Heathrow staff, seen by the BBC, says more than a thousand computers may have been &#8220;corrupted&#8221; and most of the work to bring them back online is having to be done in person and not remotely.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">The note also says that Collins rebuilt its systems and relaunched them only to realise the hackers were still inside the system.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">In separate advice to airlines, Collins told staff not to turn off computers or log out of the Muse software if they were logged in.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">The company declined to comment on the memo and its contents.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">Ransomware attacks are a prolific problem for organisations around the country, with organised cyber crime gangs earning hundreds of millions of dollars from ransoms every year.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">In April, UK retailer Marks and Spencer was hit by ransomware\u00a0<a class=\"ssrcss-f6h2dj-InlineLink e1kn3p7n0\" href=\"https:\/\/www.bbc.co.uk\/news\/articles\/cvg81m2mdmjo\" target=\"_blank\" rel=\"noopener\">that cost it at least \u00a3400m to recover from and months of disruption<\/a>. The company has declined to say if it paid attackers a ransom.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">A spokesperson for the UK&#8217;s National Cyber Security Centre\u00a0<a class=\"ssrcss-f6h2dj-InlineLink e1kn3p7n0\" href=\"https:\/\/www.bbc.co.uk\/news\/articles\/cwy88857llno\" target=\"_blank\" rel=\"noopener\">said on Saturday<\/a>\u00a0it was working with Collins Aerospace, affected UK airports, the Department for Transport and law enforcement to fully understand the impact of the incident.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">Cyberattacks in the aviation sector have increased by 600% over the past year, according to a recent report by French aerospace company Thales.<\/p>\n<p>Source: <a href=\"https:\/\/www.bbc.co.uk\/news\/articles\/cqjeej85452o\" target=\"_blank\" rel=\"noopener\">bbc.co.uk<\/a><\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<div class=\"mh-excerpt\">The EU&#8217;s cyber security agency says criminals are using ransomware to cause chaos in airports around the world. Several of Europe&#8217;s busiest airports have spent the past few days trying to restore normal operations, after <a class=\"mh-excerpt-more\" href=\"https:\/\/worldjusticenews.com\/news\/2025\/09\/22\/eu-cyber-agency-says-airport-software-held-to-ransom-by-criminals\/\" title=\"EU cyber agency says airport software held to ransom by criminals\">[&#8230;]<\/a><\/div>\n","protected":false},"author":1,"featured_media":29809,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pmpro_default_level":"","footnotes":""},"categories":[109,2,6],"tags":[11632,11631,11630,5056,7120,11629,11628,8913,11633,6270,10534],"class_list":{"0":"post-29808","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-headline","8":"category-news","9":"category-world","10":"tag-berlin-airport","11":"tag-brussels-airport","12":"tag-collins-aerospace","13":"tag-cyber-attack","14":"tag-cyber-security","15":"tag-enisa","16":"tag-european-union-agency-for-cybersecurity","17":"tag-heathrow-airport","18":"tag-muse","19":"tag-ransomware","20":"tag-uk-national-cyber-security-centre","21":"pmpro-has-access"},"_links":{"self":[{"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/posts\/29808","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/comments?post=29808"}],"version-history":[{"count":1,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/posts\/29808\/revisions"}],"predecessor-version":[{"id":29810,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/posts\/29808\/revisions\/29810"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/media\/29809"}],"wp:attachment":[{"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/media?parent=29808"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/categories?post=29808"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/tags?post=29808"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}