Sponsored by Spectra Group
—————————————————————————————————————————————————————————————————————————————————————————————————————————————
07 Nov 24. Spectra Group opens new Australia office to serve Australian and regional customers. Spectra Group, the specialist provider of secure voice, data and satellite communications systems is proud to announce the launch of Spectra Group (Australia) at MilCIS 2024 (12-14 Nov) which will be in booth B24 at the National Convention Centre, Canberra. This marks a significant expansion for Spectra Group as it enhances its ability to serve customers in Australia and the Asia-Pacific region.
As part of this launch, the communications operations of C3 Systems will amalgamate with Spectra Group (Australia), allowing for a more streamlined approach to meeting the needs of existing and future regional customers. This move enables Spectra Group to provide its renowned exceptional service and innovative solutions to regional clients. Notable offerings will include the Troposcatter Family of Systems (FoS) which provides highly mobile, high bandwidth strategic communication links between key headquarters, the award-winning SlingShotTM system that converts standard UHF and VHF tactical radios into strategic satellite communications with true Beyond Line of Sight (BLOS) and Communications on the Move (COTM) capabilities and the revolutionary new GENSS software defined radio that combines all the advantages of SlingShot with the need for increased battlefield data capacity and agility into a single system. This expansion underscores Spectra Group’s commitment to providing unparalleled support and innovative solutions to its regional customers.
Simon Davies, CEO of Spectra Group said: “As our portfolio of products and services continues to grow, providing closer support to our global customers has become the next logical step. We’ve recently expanded our footprint in the US, and we’re seeing increasing demand in Australia and the Asia-Pacific region. Our goal is to ensure our customers receive the highest levels of support.” He added: “We’re excited to bring the track record and expertise of the C3 Systems Communications team into Spectra Group, led by Chris Hembling, whose reputation for quality resonates with Spectra’s core values of agility, loyalty and honesty. Their expertise is invaluable, and we believe it will be crucial to the success of Spectra Group (Australia). The new office is being established primarily to serve the Australian market with our high-quality products and services. Additionally, the Australian team will support opportunities in the region and strengthen our wider group as needed.”
07 Nov 24. November Spectrum SitRep. Saab’s new Sirius Compact L20C COMINT ESM covers wavebands of 20 megahertz up to three gigahertz, with the option to extend this to six gigahertz.
Armada’s monthly round-up of all the latest electronic warfare news in the product, programme and operational domains.
New Sirius COMINT System Unveiled
Saab has unveiled the latest member of its Sirius communications intelligence Electronic Support Measure (ESM) family in the guise of the Sirius Compact L20C. The company told Armada, via a written statement, that this new product covers a waveband of 20 megahertz up to three gigahertz. Customers have the option to extend this to waveband to six gigahertz. The Sirius Compact L20C can perform a direction-finding scan while simultaneously listening to a specific signal. Saab added that the ESM uses several techniques to determine emitter location. These techniques include phase interferometry, super resolution direction finding, and static and dynamic triangulation. Future augmentations could include the addition of time difference of arrival emitter location techniques. Later enhancements will be possible due to the software-defined architecture used by the Sirius Compact L20C, and other members of the Sirius family. This approach enables the system to remain abreast of emerging threats as and when they appear.
KORA-40 for Sachsen class
Rohde and Schwarz announced on 21st October that the company has been contracted to provide radar and communications Electronic Support Measures (ESMs) to the Deutsche Marine (German Navy). The ESMs will be drawn from the company’s KORA family, specifically the KORA-40 design. The KORA-40 can detect, identify, locate and process radar and communications signals-of-interest. The new ESMs are to equip the navy’s ‘Sachsen’ class frigates. As Armada has previously reported, the KORA-40 can accommodate several modules according to the desired targeted frequencies. One module covers a waveband of 500 megahertz to 40 gigahertz/GHz, another covers two gigahertz to 18GHz. A company press release disclosed that the navy will receive six systems: Three of these will equip the same number of frigates. Sources close to the contract revealed that the other three are to equip shore establishments to aid training. German media reports say the shore systems are expected to be operational by 2026. The installation of the ESMs on the ships, the reports continued, should be completed by 2030.
The German Navy is receiving six KORA-40 radar and communications electronic support measures to equip its ‘Sachsen’ class frigates and shore-based training facilities. Deliveries of all systems are expected to be completed by 2030.
Finding the Jammers
Zephr has shared with Armada details of the cellphone-based Electronic Support Measure (ESM) it has developed and deployed in Ukraine to detect Global Navigation Satellite System (GNSS) Position, Navigation and Timing (PNT) jamming signals. As Armada has chronicled in the past, GNSS PNT jamming has been performed by Russian forces occupying Ukraine. The primary goal of the jamming has been to disrupt the GNSS navigation systems of some Precision Guided Munitions (PGMs). Uninhabited Aerial Vehicles (UAVs) are also dependent on PNT signals for navigation. Known as Zephr SDK, the system uses existing cellphones and their networks to detect incidences of GNSS jamming. Artificial intelligence-enabled software determines PNT jamming signals as these are detected by the phones and their network. The software can also compute jamming signal power levels, signal azimuths and points of origin. This latter factor is particularly important as it may allow kinetic effects to be directed against the jammer. The software will no doubt prove its worth as a useful capability to aid mission planning. UAV pilots and personnel using GNSS-guided PGMs will be able to plan their missions mindful of where GNSS jamming is concentrated. Zephr told Armada that the system does not depend on any hardware. Instead, it uses a Software Development Kit (SDK) optimised for cellphones using the Android operating system. A 5G 3GPP (Fifth Generation Third Generation Partnership Project) integration is needed to connect GNSS receivers. The company continued that the capability can be added as a software application on a standard mobile device. An SDK integrating these capabilities into the Android-based Tactical Assault Kit battle management software is also available. (Source: Armada)
05 Nov 24. Global: Increased botnet activity highlights elevated security risks from Chinese-nexus actors. On 3 November, international news outlets reported that the Chinese-nexus group ‘Storm-0904’ is using the ‘Quad7’ botnet to conduct password spray attacks. The botnet infrastructure is made up of compromised network edge devices such as small office/home office (SOHO) and virtual private network (VPN) appliances. It contains at least 8,000 active devices at any given time, pointing to the scale and potential impact of this operation. Storm-0904 is conducting password spray attacks via pre-established Quad7 infrastructure, likely in an effort to hijack user accounts for additional malicious activities. Notably, the group frequently changes the internet protocol (IP) address associated with its infrastructure and limits the amount of login attempts per day to enhance detection evasion. Additionally, we assess that the botnet in this campaign is possibly still in a testing phase due to the increasing number of infected devices. Quad7 activity has surged markedly since September (at least), elevating the security risks facing global organisations in the medium-to-long term. (Source: Sibylline)
05 Nov 24. Finnish Defence Forces Started Serial Procurement of Bittium Tough SDR™ Tactical Radios from Bittium Wireless Ltd, a Subsidiary of Bittium Corporation. The Finnish Defence Forces has started the serial procurement of Bittium Tough SDR Handheld and Vehicular radios and related accessories by issuing a purchase order to Bittium Wireless Ltd, a subsidiary of Bittium Corporation. The value of the purchase order is approximately EUR 25.6m and it is the third additional purchase related to the additional purchase option included in the purchase agreement signed on December 12, 2018. The deliveries for the purchase order will be started during the year 2024 and they will be finalized during the year 2025. Bittium announced on November 4, 2024, with a stock exchange release that the Finnish Minister of Defence Mr. Antti Häkkänen had authorized the Finnish Defence Forces to start the serial procurement of Bittium Tough SDR tactical radios.
Bittium Tough SDR Handheld and Vehicular radios will be integrated as part of the Finnish Army’s M18 C5 system and the Finnish Defence Forces’ family of radios. The Tough SDR radios will gradually replace the Finnish Defence Forces’ existing stock of analogue tactical radios with modern software-defined radios enabling broadband tactical communications. The serial procurement enables expanding the usage of the new radios in all the military branches of the Finnish Defence Forces and the subordinate establishments operating under the Defence Command.
The radios will offer significantly better performance compared to the earlier generation of digital tactical radios thanks to the software and waveforms used in the radios. It enables carrying out performance enhancements for the radios throughout their whole life cycle. The Tough SDR radios are compatible with the software-defined radio based Bittium Tactical Wireless IP Network™ (TAC WIN) system already used by the Finnish Defence Forces.
Bittium issued a stock exchange release on December 12, 2018, on the purchase agreement for Bittium Tough SDR radios signed by the Finnish Defence Forces and Bittium. The purchase agreement includes terms for additional purchases, according to which, the Finnish Defence Forces have an option to purchase additional tactical radios and related accessories, training, and system management for the Army, Air Force, and Navy based on the prices agreed in the purchase agreement.
Bittium Tough SDR™ product family
Bittium Tough SDR product family of tactical radios consists of Bittium Tough SDR Handheld™ radio for dismounted soldiers and Bittium Tough SDR Vehicular™ radio for vehicle installations. The Tough SDR radios help to produce and share real-time situational awareness to all levels of the organization. This improves the performance and the effectiveness of the tactical troops, and leading the troops is easier based on the up-to-date situational awareness and more reliable connections. The uniquely wide range of frequency bands in the radios improves combat survivability. Using several waveforms, even simultaneously, improves compatibility and enables operations on different levels and missions. The radios are compatible with ESSOR High Data Rate Waveform that is standardized by NATO and enables tactical communications between troops from different nations. Together with the software-defined radio based Bittium Tactical Wireless IP Network™ (TAC WIN) system, used for forming a tactical broadband mobile IP backbone network, it is possible to bring broadband data and voice to all mobile troops starting from brigade level and all the way across the battlefield to an individual soldier.
Inside Information: Finnish Defence Forces Authorized to Start Serial Procurement of Bittium Tough SDR™ Tactical Radios from Bittium Wireless Ltd, a Subsidiary of Bittium Corporation. The Finnish Minister of Defence, Mr. Antti Häkkänen has authorized the Finnish Defence Forces to start serial procurement of Bittium Tough SDR Handheld and Vehicular radios and related accessories from Bittium Wireless Ltd, a subsidiary of Bittium Corporation. The total value of the procurement would be approximately EUR 25.6 m and it would be the third additional purchase related to the additional purchase option included in the purchase agreement signed on December 12, 2018. The Finnish Defence Forces will issue a separate purchase order for the products and related accessories. The products are planned to be delivered during the year 2025. The product deliveries are planned to start during the remainder of the year 2024.
Bittium Tough SDR Handheld and Vehicular radios will be integrated as part of the Finnish Army’s M18 C5 system and the Finnish Defence Forces’ family of radios. The Tough SDR radios will gradually replace the Finnish Defence Forces’ existing stock of analogue tactical radios with modern software-defined radios enabling broadband tactical communications. The procurement authorized now enables expanding the usage of the new radios in all the military branches of the Finnish Defence Forces and the subordinate establishments operating under the Defence Command.
“We have achieved a major milestone in the development of our Bittium Tough SDR radios. The products are now ready for serial procurement. We thank the Finnish Defence Forces for the close cooperation during the product development phase. In cooperation we have been able to ensure that the radios meet the requirements of the Finnish Defence Forces and the battlefield. The product development and performance enhancements for the products will continue for their existing features. This continuous development ensures that the performance of the products is sustained according to the requirements of the battlefield in the ever-changing conditions,” says Tommi Kangas, Senior Vice President of Bittium’s Defense & Security business segment.
The radios will offer significantly better performance compared to the earlier generation of digital tactical radios thanks to the software and waveforms used in the radios. It enables carrying out performance enhancements for the radios throughout their whole life cycle. The Tough SDR radios are compatible with the software-defined radio based Bittium Tactical Wireless IP Network™ (TAC WIN) system already used by the Finnish Defence Forces.
Bittium issued a stock exchange release on December 12, 2018, on the purchase agreement for Bittium Tough SDR radios signed by the Finnish Defence Forces and Bittium. The purchase agreement includes terms for additional purchases, according to which, the Finnish Defence Forces have an option to purchase additional tactical radios and related accessories, training, and system management for the Army, Air Force, and Navy based on the prices agreed in the purchase agreement.
Bittium Tough SDR™ product family
Bittium Tough SDR product family of tactical radios consists of Bittium Tough SDR Handheld™ radio for dismounted soldiers and Bittium Tough SDR Vehicular™ radio for vehicle installations. The Tough SDR radios help to produce and share real-time situational awareness to all levels of the organization. This improves the performance and the effectiveness of the tactical troops, and leading the troops is easier based on the up-to-date situational awareness and more reliable connections. The uniquely wide range of frequency bands in the radios improves combat survivability. Using several waveforms, even simultaneously, improves compatibility and enables operations on different levels and missions. The radios are compatible with ESSOR High Data Rate Waveform that is standardized by NATO and enables tactical communications between troops from different nations. Together with the software-defined radio based Bittium Tactical Wireless IP Network™ (TAC WIN) system, used for forming a tactical broadband mobile IP backbone network, it is possible to bring broadband data and voice to all mobile troops starting from brigade level and all the way across the battlefield to an individual soldier.
04 Nov 24. ELT Group will take part in the 29th edition of Euronaval Hall 6 G36, Europe’s most important showcase for the naval community that will take place in Paris Nord, Villepont between 4th and 7th November. With more than 70 years of experience in electromagnetic spectrum operation (EMSO) domain, ELT Group will show its solutions and capabilities for the Naval and Underwater domains protecting naval and maritime assets while projecting power at sea and providing a key contribution to the Maritime Domain Assessment. The Group has a long-standing tradition in the naval sector and a strong record of successful domestic and international collaboration on key platforms like the Franco-Italian Horizon and FREMM class ships, the NFH-90 naval helicopter and a wide range of projects in the Middle East and Asia-Pacific. Our products boast high sensitivity, high accuracy, fully automatic surveillance functions and state-of-the art data processing. The focus at Euronaval will be on its new generation Naval EWS suite developed for the FREMM EVO class, and capable now to include an integrated Anti-Drone capability through dedicated components and benefiting from the assets already available on board (CESM, RECM, EWC2), with a significant growth capacity through the widespread use of Artificial Intelligence. A peculiar attention is given by ELT Group to the Underwater domain, which is gaining increasing strategic relevance because of its very wide range of applications; at the same time is the new frontier where the defence world is beginning to confront itself. The EWS for the U212 NFS submarines class represents the key reference. This EWS suite is characterised by a new highly innovative integrated antenna, able to cover the whole Radar and Comms Spectrum, allowing detection and direction finding with outstanding performances.
01 Nov 24. Saab evolves naval electronic support measures solutions. Saab Grintek Defence (SGD) is evolving its naval electronic support measures (ESM) solutions with its new third generation U/SME-400 wideband digital ESM family. The U/SME-400 is the company’s flagship naval radar warning/electronic support measures system and will be displayed for the first time at the Euronaval exhibition in Paris that takes place between 4 and 7 November. Emphasising the importance of ESM systems for naval applications, Saab notes that navies still rely on ESM systems as primary sensors when operating in radar silence. The company’s first- and second-generation systems have been integrated onto Greek, Portuguese, and South Korean submarines, amongst others – fifteen solutions are in service with three NATO navies. The ESM and ELINT (electronic intelligence) range comprises the SME-50 ESM receiver, SME-150 ESM system with ELINT functionality, and SME-250 ESM receiver with digital ELINT receiver – the latter covers the .5-18 GHz range while the SME-50 and SME-150 cover the 2-18 GHz range. The SME designation is used for surface vessels and UME for subsurface vessels. These systems can be integrated with the NLWS (Naval Laser Warning System), MASS (Multi Ammunition Softkill System) or other decoy systems, active electronic countermeasures (ECM) systems, and Saab CRS-8000 communications ESM system (Saab Deutschland offers the CRS series of naval communications intelligence [COMINT] and communications ESM [C-ESM] solutions).
What distinguishes the new U/SME-400 from previous generations is a shift to a fully digital system with a wideband receiver. According to Francois Raubenheimer, Business Development and Marketing Executive at Saab Grintek Defence, some of the advantages of going digital are enhanced signal processing, faster processing, better classification and tracking of complex signals especially in crowded environments with overlapping signals, resilience to interference, and easy adaptation to new signal types without hardware changes, making it possible to react quickly to new tactics developed by adversaries.
Other advantages are greater accuracy and sensitivity, including improved detection of weak and low power signals. Raubenheimer pointed out that radars are becoming stealthier and use lower power, making them more difficult to detect.
The U/SME-400 series is being developed in three main variants: U/SME-410 (2-18 GHz with 16 GHz instantaneous bandwidth [IBW] acquisition and .5 GHz instantaneous bandwidth direction finding [DF]); U/SME-420 (1-18 GHz with 16 GHz IBW acquisition and 8 GHz IBW DF); and U/SME-450 (1-18 GHz with 16 GHz IBW acquisition and 16 GHz IBW DF). These are able to intercept, detect, and identify modern wideband radars including low probability of intercept (LPI) frequency modulated continuous wave (FMCS) radars at long ranges. The U/SME-420 and U/SME-450 are both also available with an option to cover Ka-band.
Development of the U/SME-400 series is still underway, with about a year to go before production ready status, but Saab is already promoting the system as naval vessel programmes take years to be completed. Sea trials are expected in the next year or so, and the company has already offered it to prospective customers.
SGD has built its naval business tremendously over the last quarter of a century, with one of its other key naval products being its Naval Laser Warning System (NLWS), which can be either a standalone system or fully integrated into a vessel’s combat system. It includes a laser waring system for surface vessels and a Light Detection and Ranging (LIDAR) blue-green laser sensor for sub-surface applications. Sensors are placed around a vessel to ensure adequate coverage, with the number of sensors determined by the size of the vessel. The system, which interfaces with the vessel’s combat management system and ESM, can provide the bearing, laser classification and identification information required to deploy the necessary countermeasures.
The NLWS features the NLWS 310 laser warning sensors, which in LWS 310 guise is also used in Saab’s IDAS defensive aids suite for aircraft, and operates across the .5-1.7 nm wavelength to provide threat classification and direction of arrival for laser rangefinders, designators and missile guidance lasers. The LWS series has gone through several versions, namely Mk I, II, and III, with a new high accuracy sensor (LWS-700) launched in 2023.
The new LWS 700 allows for the automated detection, classification, and identification of laser-based weapons. It is capable of classifying and identifying laser threats such as target designators or laser rangefinders. With a 1° bearing and elevation accuracy, the sensor is able to support countermeasures, specifically the deployment of hard-kill counter fires. This is a much-improved version to the LWS 310, which offers a bearing accuracy of 7.5°.
SGD’s NLWS is in service with several nations, including with the United Arab Emirates Navy (Baynunah class corvettes), German Navy, and New Zealand Navy and on order, 5+ nations. For German Mine Sweepers, Saab’s radar ESM and laser warning systems are used in combination with Rheinmetall’s Multi Ammunition Softkill System (MASS) decoy system, which guards against both radar and laser-guided threats.
SGD’s naval products are somewhat unique in that they are used in air, land and sea applications as they share common building blocks. Saab Grintek Defence has for many years manufactured laser warning and missile approach warning sensors, with previous generations being the LWS-310 and MAW 300 respectively. The company recently launched its next generation MAW 400 and LWS-330 for airborne platforms, now in production, with a European customer the first to take these new products.
In addition, Saab Grintek Defence is producing a LEDS 50 MK 4 system with the LWS-700 sensors, which is a 1-degree sensor for land applications. (Land Electronic Defence Systems, or LEDS, is an integrated, modular, active protection system consisting of laser warning sensors, an active defence controller, human-machine-interface and an effector control segment that can launch smoke or cue jammers).
Saab’s laser and missile approach warning systems form part of its integrated defensive aids suite (IDAS) for helicopters, transport aircraft and combat aircraft. IDAS warns against radar, laser and infrared guided threats and automatically deploys appropriate countermeasures such as chaff and flares. IDAS is operational on 30+ aircraft types in more than 15 countries.
(Source: https://www.defenceweb.co.za/)
31 Oct 24. Bombardier Defense Delivers 8th Global Aircraft to the USAF BACN Program.
- Bombardier Defense delivered the eighth Bombardier Global aircraft to the United States Air Force for the Battlefield Airborne Communications Node (BACN) program at the company’s service centre in Hartford, Connecticut
- Bombardier’s multi-year agreement with the Air Force supports a distinctive and reliable airborne communications platform that is essential for completing critical missions across air, space, land and sea
- Due to their proven reliability, endurance, reduced maintenance costs and fuel efficiency, Global business jets have become the go-to platforms for specialized missions around the world
Bombardier Defense today announced the delivery of the eighth Bombardier Global jet to the United States Air Force’s (USAF) Battlefield Airborne Communications Node (BACN) program, which is part of a previously announced multi-year contract between Bombardier and the USAF. This deal represents a potential total value of close to US$465m. To date, Bombardier Defense has delivered seven Global aircraft to the BACN program under other agreements, with a ninth aircraft scheduled for delivery in 2025.
“We are proud that Bombardier’s category-defining Global aircraft continue to be a platform of choice for the U.S. Air Force,” said Jean-Christophe Gallagher, Executive Vice President, Aircraft Sales and Bombardier Defense. “The speed, agility and low operating costs of our Global jets make them ideally suited for specialized missions meant to strengthen national and international security initiatives, such as the critical BACN program. With the delivery of this aircraft, Bombardier Defense continues to deepen its relationship with the U.S. Air Force and set itself apart as a missionized platform provider of choice.”
The BACN aircraft, known as E-11A, is a specialized communications platform that enables enhanced situational awareness and interoperability. Dubbed “Wi-Fi in the sky” by the USAF, BACN-equipped Global aircraft act as high-altitude communications gateways that can be used around the world, relaying or bridging voice and tactical data between air and land forces, and surmounting obstacles such as mountains, rough terrain or distance. Due to their unmatched combination of speed, range and endurance, Bombardier Global aircraft remain the platform of choice for more than 10 different mission types across the world.
Bombardier Defense has dedicated in-house engineering and support teams with the ability to incorporate customer-requested modifications and provide comprehensive integration solutions with complete certification capabilities across the full spectrum of civilian, military and hybrid operations. Recognized around the world for its diverse portfolio of proven and versatile specialized aircraft platforms, Bombardier brings decades of experience working with hundreds of special mission operators and renowned mission systems integrators. (Source: ASD Network)
01 Nov 24. Cyber Update Key points
- The exploitation of a software vulnerability points to sustained information-theft and financial risks stemming from the ransomware groups ‘Fog’ and ‘Akira.’
- The Russian state-sponsored group ‘UNC5812’ is targeting military recruits in Ukraine, underscoring the current cyber espionage and disinformation risks (Technical analysis below).
- A new and highly sophisticated spyware variant has raised the security risks for iOS users.
- A long-term cyber operation targeting Canadian entities has heightened the espionage risks stemming from Chinese threat actors .
- A new and more sophisticated variant of the ‘FakeCall’ malware is being used as part of a financially motivated operation, elevating the financial risks facing Android users in South Korea (see Technical analysis below).
Technical analysis of weekly stories
The Russian state-sponsored group UNC5812 is targeting military recruits in Ukraine in a cyber espionage and influence operation. The group created a fake profile on the messaging platform Telegram to reach potential victims, purporting to provide conscripts with crowdsourced locations of Ukrainian military recruiters. Users are prompted to click on a fraudulent website to download the software, unknowingly installing malware on compromised systems. The actors also use social engineering techniques to instruct users to disable Google Play Protect security mechanisms to allow for third-party downloads and detection evasion. The group has targeted Windows and Android users to inject compromised systems with the ‘PURESTEALER’ information-stealer and the ‘CRAXSRAT’ backdoor. PURESTEALER enables the actors to steal browser data and cryptocurrency wallets, while CRAXSRAT allows for file and text message management, credential harvesting and other monitoring capabilities. Additionally, the fraudulent website distributes anti-mobilisation content to undermine Ukrainian recruitment efforts. It also solicits users to upload videos of unfair actions to discredit the Ukrainian military, highlighting the disinformation risks associated with this campaign. Notably, UNC5812 likely purchases promoted posts on legitimate Ukrainian Telegram channels to direct users to the actor-controlled Telegram channel, propagating the infection to a wider audience and enhancing the site’s legitimacy.
A new and more sophisticated version of the FakeCall malware is targeting Android users in South Korea in a financially motivated campaign. The campaign typically starts with a phishing attempt to trick users into downloading a malicious call handler application that acts as a malware dropper. This then installs the main FakeCall payload, while simultaneously establishing communication with the actors’ command-and-control (C2) infrastructure to perform additional malicious activities. This new variant manipulates Android accessibility service features to bypass security mechanisms and to take control of a device’s user interface (UI). Additionally, it incorporates two receiver services to monitor the status of a victim’s screen and Bluetooth functionality, as well as a phone-listener service to execute commands on compromised devices (including sending and deleting messages and ending phone calls). Subsequently, the malicious application asks the user to set the app as the device’s default call handler; this provides the threat actors with the ability to monitor all incoming and outgoing phone calls. Threat actors then interject any calls to the victim’s financial institution, displaying a fake UI with the institution’s legitimate phone number. This enables them to steal sensitive financial information to hijack user accounts so as to steal funds. This operation highlights the continuous development of malware by cyber criminals to garner illicit profit as well as the actors’ growing sophistication (this variant is highly obfuscated to evade detection).
Some non-exhaustive recommendations to mitigate against these threats include:
- Monitor devices and networks for suspicious activity
- Add available Indicators-of-Compromise (IoCs) to your organisation’s security detection systems to detect potentially malicious samples on the network
- Adopt behaviour-based end-point detection and response (EDR) solutions, prioritising the detection of the initial stages of a compromise
- Ensure adequate security monitoring and detection capabilities, particularly for all external-facing services and devices, including personal devices connected to corporate networks or applications
- Conduct cyber hygiene awareness courses for users, enabling them to recognise and report phishing and other types of social engineering
(Source: Sibylline)
05 Nov 24. Thales’s Naval DRAKON Solution Enhances Interoperability and Secure Connectivity for Naval Forces.
- With the return of high-intensity conflicts and an increasingly complex threat environment, naval forces must be prepared to take part in allied operations involving the coordinated deployment of multiple platform types including surface ships, submarines, aircraft and unmanned platforms.
- Thales has developed Naval DRAKON to meet these new requirements, providing a cybersecure, interoperable connectivity solution for deployed forces by tying together multiple communication systems (military and commercial satcoms, VLF/LF, HF, V/UHF, etc.).
- The new solution enables naval forces to control their electromagnetic footprint at sea and adapt communications to the operational tempo of the mission by prioritising data rate, discretion, resilience or low latency.
With the growing number of platform types deployed (allied naval formations, unmanned surface vessels, unmanned air systems, etc.), the broad array of communication systems available and the multitude of threats (missiles, torpedoes, drones, etc.), naval force coordination is becoming increasingly complex.
Naval DRAKON was specifically developed to provide high-data-rate, robust and secure communications between naval vessels, airborne sensors and command centres. It is designed around an open architecture to support all the latest and most advanced communications technologies such as wideband HF (HF XL), ultra-compact multi-orbit satcom terminals, high-data-rate LOS radio and software-defined V/UHF.
This sea-proven solution enables naval forces to control their electromagnetic footprint at sea and adapt communications to the operational tempo of the mission by prioritising data rate, discretion, resilience or low latency.
Naval DRAKON is the naval version of Thales’s DRAKON solution for land forces, which was presented at Eurosatory in June 2024, and draws on the same operational expertise and proven capabilities.
Thales is a recognised leader in critical systems integration, working with more than 20 naval shipyards around the world and equipping more than 400 naval platforms, including about 100 submarines, over the last 40 years. Earlier this year, the Jacques Chevallier, the first of France’s new fleet replenishment tankers, completed a deployment of several months equipped with the COMTICS voice distribution system and the PARTNER-C communications management system.
The other fleet replenishment tankers in the Jacques Chevallier class, as well as the FDI defence and intervention frigates for France and Greece and the UK Royal Navy’s T31 frigates, will be the first vessels to be equipped with this new, scalable solution, which will support advanced functionalities such as spectrum management, decision support, flow management, cybersecurity management and smart maintenance.
Naval DRAKON will tie together all these services and functionalities to provide a fully integrated solution for naval forces.
(Source: ASD Network)
———————————————————————————————————————————————————————————————————————————————————————————————————————————–
Spectra Group (UK) Ltd
Spectra Group (UK) Ltd, internationally renowned award-winning information security and communications specialist with a proven record of accomplishment.
Spectra is a dynamic, agile and security-accredited organisation that offers secure Hosted and Managed Solutions and Cyber Advisory Services with a track record of delivering on time, to spec and on budget.
With over 15 years of experience in delivering solutions for governments around the globe, elite militaries and private enterprises of all sizes, Spectra’s platinum and gold-level partnerships with third-party vendors ensure the supply of best value leading-edge technology.
Spectra was awarded the prestigious Queen’s Award for Enterprise (Innovation) in 2019 for SlingShot.
In November 2017, Spectra Group (UK) Ltd announced its listing as a Top 100 Government SME Supplier by the UK Crown Commercial Services.
Spectra’s CEO, Simon Davies, was awarded 2017 Businessman of the Year by Battlespace magazine.
Founded in 2002, the Company is based in Hereford, UK and holds ISO 9001:2015, ISO 27001:2013 and Cyber Essentials Plus accreditation.
————————————————————————————————————————————————————————————————————————————————————————————————————————————————-