NEW DELHI, Dec 2: The Government has confirmed that seven airports across India
were targeted by cyber attacks, leading to flight disruptions. The confirmation
follows reports of technical anomalies, including the spoofing of navigational
systems, at several big airports nationwide on November 7.
Union Civil Aviation Minister Ram Mohan Naidu Kinjarapu informed the Parliament
on Tuesday that flights approaching the airports reported GPS spoofing while
using Global Positioning System (GPS) signals-based landing procedures.
The affected airports included Delhi, Mumbai, Kolkata, Hyderabad and Bengaluru.
The Government claimed that no flight operations were disrupted or cancelled
due to the GPS spoofing. The air traffic control systems maintained stability,
allowing flights to operate without interruption, the Minister said.
The attacks involved GPS spoofing, where false navigation signals were sent
to aircraft. First, pilots approaching Delhi’s Runway 10 reported interference,
forcing them to switch to backup landing procedure.
Days before, at Delhi’s Indira Gandhi International Airport, the Automatic
Message Switching System (AMSS) was compromised, disrupting operations for over
12 hours. Over 800 flights were delayed and 20 cancelled.
Authorities warned of rising risks from ransomware and malware targeting aviation
systems, prompting heightened cyber vigilance nationwide.
The Wireless Monitoring Organisation (WMO) and DGCA launched investigations
to trace the source of spoofing interference.
While flights were ultimately safe, the event was described as one of the most
serious GPS integrity threats ever reported near India’s busiest airport.
Airbus A320 global software crisis
Last week, Airbus recalled about 6,000 A320-family jets worldwide (including
350 in India) for urgent software fixes. The fault was linked to solar radiation
corrupting flight-control computers, causing a JetBlue A320 to suddenly drop
altitude from 35,000 to 10,000 feet in October.
Although, the GPS spoofing and the Airbus technical vulnerability are independent
events.
Regulators ordered grounding until airlines patched the Elevator and Aileron
Computer (ELAC) software. Operations in India normalized by last weekend.
This was described as the largest single-model grounding since the Boeing 737
MAX crisis.
How they connect
The Delhi cyber attack (November 7) exposed vulnerabilities in aviation IT
systems. The wider airport cyber attacks occurred earlier showed systemic risks.
The Airbus A320 software crisis then compounded global aviation disruption,
highlighting how both cybersecurity threats and technical faults can converge
to destabilize air travel.
While India’s airports faced coordinated cyber interference—Delhi was hit hardest—the
Airbus A320 recall added global turbulence to aviation safety due to technical
vulnerability.
The spoofing in India which was about deceiving aircraft sensors, but what
happened in Europe in September is about system hacks disabling ground operations
software. However, both GPS spoofing and ransomware attack constitute very serious
cyber threats to aviation safety.
In the September incident, several of Europe's biggest airports faced disruptions
after hackers knocked out automated check-in systems provided by Collins Aerospace,
owned by RTX (RTX.N), affecting dozens of flights and thousands of passengers.
The ransomware attack, the EU's cyber security agency said, highlighted the
growing risks of such attacks to critical infrastructure and industries.