Value chain · CLM-0884
In plain terms
The February 2022 KA-SAT attack was a break-in to a ground computer network. Nobody needed a rocket, and Viasat, which runs the network, said it found nothing showing the satellite itself was touched - which is what it could check, not a guarantee. On whether China can currently attack a satellite in high orbit with a missile, this register holds two outside views that differ: a research foundation judges it unlikely, and a US defence intelligence body reads a 2013 Chinese launch as suggesting the capability may exist.
The claim as recorded
The February 2022 KA-SAT intrusion, which this register records across four claims, required no space capability: access was obtained through a misconfiguration in a VPN appliance into the trusted management segment, and Viasat, which runs the network, reported that it had found nothing to show the satellite or the ground infrastructure behind it was directly involved, impaired or compromised, while its investigation was still ongoing. On the space-based alternative this register holds two assessments that differ: in the view of Secure World Foundation, China is unlikely at present to possess an operational direct-ascent anti-satellite capability against satellites in MEO or GEO, noting that only one test, in May 2013, is known to have targeted higher altitudes, while the US Defense Intelligence Agency reads a 2013 Chinese launch to near-GEO altitude as suggesting a basic capability could exist to use anti-satellite technology against satellites at great distances.
Evidence behind this: Derived from six claims. Tier follows the weakest input: five are T4 and CLM-0759 is T3, so the weakest is T4 and the tier is T4.
Scope and limits
THIS IS A STATEMENT ABOUT WHAT THIS REGISTER HOLDS, NOT ABOUT HOW ATTACKS DISTRIBUTE IN THE WORLD. It does NOT establish that ground-segment attacks are more common, more likely or more damaging than space-based ones, it is not a base rate, and it does NOT establish that this is the only realised attack on a satellite service: no search for others is cited here. It concerns one consumer broadband network, not a power-delivery system, and no SBSP system is evidenced as carrying this vulnerability. Viasat reported finding NO EVIDENCE that the satellite was involved, during an investigation it said was still ongoing; that is not a statement that the satellite was not involved. "Required no space capability" does not rest on that absence: it follows from the attack path Viasat describes, from the VPN misconfiguration through lateral movement to legitimate management commands sent to user modems. Each counterspace assessment is one organisation's judgement at one date. The Defense Intelligence Agency document states an information cutoff of March 2022, while Secure World Foundation's assessment is dated 2026, so part of the difference may be four years of additional open-source reporting rather than analytical disagreement, and neither may be called wrong on this comparison. The Defense Intelligence Agency text dates the launch only to 2013; matching it to the May 2013 test is this register's reading.
What it assumes
That Viasat's own account of what was and was not involved is accurate. CLM-0757 and CLM-0758 are Viasat's report, published five weeks after the event while its own investigation was stated to be ongoing.
Where it comes from
CLM-0757: intrusion via a misconfiguration in a VPN appliance giving remote access to the trusted management segment. CLM-0758: Viasat found nothing showing that the satellite or its ground infrastructure were directly involved, impaired or compromised. CLM-0741: Secure World Foundation thinks China probably does not currently possess an operational direct-ascent anti-satellite capability against MEO or GEO. CLM-0759: the UK NCSC and partners attributed the intrusion to Russia. CLM-0760: the affected users, including German wind turbines - these two complete the four records the claim counts. CLM-0743: the US Defense Intelligence Agency reads a 2013 Chinese launch to near-GEO altitude, which CLM-0743 matches to the May 2013 test, as suggesting a basic capability could exist to use ASAT technology against satellites at great distances, which is the second and differing assessment.
Related records
- Answers question
- QST-011 not published in this release
Cite this
energyaperture.com/c/clm-0884
CLM-0884, Energy Aperture, as of 2026-09.