SRC-230

KA-SAT Network cyber attack overview, 30 March 2022.

Published claims resting on this source

• CLM-0757 In its own report on the February 2022 attack, Viasat says the attacker got in through a misconfigured VPN device, reached the network management system, and then sent the network's own ordinary management commands to tens of thousands of customer modems at once, wiping enough of their memory to knock them off the network without permanently breaking them.
• CLM-0758 Viasat's own report, about five weeks after the attack, says it had found no evidence that the satellite itself or its main ground stations were directly involved, and that its analysis of affected modems found no impact on their physical or electronic parts and no evidence of tampering with modem software or firmware images, yet the service still went down across much of Europe.
• CLM-0765 Searching all fourteen security and defence sources for anything about insurance or liability turns up no premium, no cover limit and no liability figure for any satellite; the only real mention is one reference to the 1972 space liability treaty.

Cite this