20 Feb 25. Spectra Group announces the award of a contract to supply Troposcatter COMET to the Irish Defence Force. Spectra Group (UK) Ltd, the specialist provider of secure voice, data and satellite communications systems, has announced a contract award to supply the Irish Defence Force with Comtech’s Troposcatter Compact Over-the Horizon Mobile Expeditionary Terminals (COMET). Spectra Group acquired the global distribution rights to supply Comtech’s Troposcatter Family of Systems (FoS) in February 2024 (less USA, Canada and Mexico which Comtech retains). This procurement is the next in a series of overseas sales under this agreement. The Irish Defence Force has procured a number of COMET systems, with more systems and the associated training and support package in the pipeline, including aspirations to deploy the new Troposcatter on the Move (TOTM) enhancement; more news on this exciting new capability coming soon. Spectra Group is attending EnForce Tac in Booth 7-360 showcasing their specific communication capabilities, including GENSS. Troposcatter COMET will also be on display at the JK Defence booth (10-521).
Tropospheric scatter is a communications capability that uses the Troposphere (up to about 13km altitude) to provide high bandwidth communications. It is satellite independent and works in a GPS/GNSS denied environment, so is suitable for use in a Peer-on-Peer conflict/Multi Domain Integration. Troposcatter inherently has very low latency and can provide huge bandwidth, enabling analysis and manipulation of large data, which combined with its low operating cost makes it suitable for strategic and tactical headquarters. In the past, Troposcatter technology required large power-hungry equipment unsuitable for expeditionary or manoeuvre warfare. However, modern technology and significant development by Comtech has revolutionised the size, weight and power of the Troposcatter Family of Systems, of which, COMET is the smallest and most lightweight.
COMET is specifically designed for rapid deployments and mobile operations, delivering high bandwidth (5-60Mbps) and long-range connectivity (70km+) while operating efficiently with just 10 Watts of power—currently the only low-power Troposcatter system available. The COMET system uses a single 1-metre dish and the COMTECH CS67Plus Modem capable of up to 210Mbps, which takes the IP stream and directly converts to two RF outputs in the range 4.4-5Ghz to provide two frequencies, amplified by Dual 10W GaN amps (Dual LNA on the receive path). This allows for dual frequency/polarisation diversity that compensates for any fading/multi-path effects and ensures low latency (typically 9-20mS). In suitable conditions, the bandwidth, range and data transfer speeds can be much greater than specified. The COMET system is simple, intuitive, and easy to set up and does not require the use of vulnerable and expensive satellites. It has been developed to be man-portable and the whole system can be established and operational within 15 minutes. The COMET system comes packed in two small cases (25kg each) that can be transported on civilian aircraft if required.
Michael Davies, Business Development Manager at Spectra Group said: “This is a continuation of what we hope to be many procurements under our Troposcatter global distribution agreement with Comtech. We have been working closely with the Irish Defence Force for some time to find suitable solutions to their strategic communications challenges and help meet their national defence commitments. With many NATO countries already operating Troposcatter systems, COMET is the perfect solution for its reliability, capacity, deployability and interoperability both on the land and for maritime vessels.”
20 Feb 25. Creomagic Showcasing High-Performance Wireless Solutions for Tactical UAVs. At IDEX 2025 and the EnforceTac trade fair, Creomagic showcased its next-gen of compact wireless solutions, including the CreoAir Pro, designed to meet the demanding communication needs of aerial operations. Central to this launch will be CreoAir, Creomagic’s advanced Software-Defined Radio (SDR) technology, which promises to deliver exceptional security and connectivity even in the most challenging environments. As UAVs and aerial systems become integral to modern military operations, the demand for robust and secure communication solutions grows. These systems are crucial for gaining tactical advantages, but they face unique challenges. They must operate in environments prone to interference, spectrum limitations, and adversarial threats, while simultaneously enabling seamless interoperability across diverse platforms. Real-time video and data are becoming increasingly essential for tactical decision-making, heightening the need for communication systems that are not only reliable but also low-latency and secure. Creomagic’s CreoAir technology is specifically engineered to address these challenges. It offers robust communication solutions tailored to aerial operations, from lightweight UAVs to full-scale military missions. The CreoAir product line boasts high-performance data links with exceptional data rates, optimized for a variety of aerial applications. These solutions are powered by SDR and Mobile Ad-Hoc Network (MANET) technologies, providing data rates of up to 40 Mbps, adaptive video encoding, and seamless integration with multiple interfaces. This capability allows for simultaneous support of multiple data sources, ensuring smooth control of numerous platforms in dynamic operational environments. Security is a core focus of CreoAir. The system is equipped with advanced Communication Security (COMSEC) and Transmission Security (TRANSEC) features, ensuring resilient, uninterrupted communication in hostile settings. Continuous spectrum scanning, AES-256 encryption, frequency hopping, and automatic interference avoidance powered by cognitive SDR technology all contribute to safeguarding against interception and detection (LPI/LPD). These features enhance protection against Electronic Warfare (EW) threats, making CreoAir a reliable solution for mission-critical communications. The CreoAir Pro combines the advantages of its predecessors with next-generation computational power and advanced algorithmic processing. Optimized for AI-driven operations, it supports dynamic spectrum allocation, real-time decision-making, and cognitive networking. This new generation is lighter, more compact, and designed for multi-domain applications, from tactical UAVs to autonomous systems and integrated battle networks.
A standout feature of the CreoAir Pro is its open architecture, which facilitates faster development cycles, easier integration with third-party systems, and more customization options for end users. This open framework also allows for rapid software updates, ensuring that the system remains adaptable to the evolving needs of the modern battlefield. Whether used in manned and unmanned aerial networks, personal tactical radios for special forces, first responders, or unmanned ground robotics, Creomagic continues to push the boundaries of communication technology to meet the demands of its diverse clientele.
Alex Shapochnik, CEO of Creomagic, said, “We are very proud to introduce this latest addition to our range of innovative CreoAir transceivers. We believe the advanced computational technology and superior SWaP-C provides an even greater offering for our clients, especially for unmanned aerial systems, while maintaining a competitive price point. Creomagic focuses on long-term partnerships in strategic markets to meet the growing global demand for locally produced equipment. Europe remains a key priority for our marketing and sales, where we aim to establish the right partnerships for joint production, development and tailored solutions.” (Source: https://www.defenseadvancement.com/)
20 Feb 25. ADSB joins forces with Indra to equip the FA-400 offshore patrol vessel with advanced naval systems.
- EDGE Group’s naval arm, Abu Dhabi Ship Building (ADSB), signed the agreement with Spain’s Indra at NAVDEX 2025
- Advanced radar, electronic warfare, and counter-UAS solutions to be delivered through PULSE, the Abu Dhabi-based joint venture between EDGE and Indra
EDGE Group entity, ADSB, a regional leader in the design, construction, repair, maintenance, refit, and conversion of naval and commercial vessels, has formed a strategic partnership with Indra, a world-leading information technology and defence systems company headquartered in Spain. The collaboration, supported by PULSE, the joint venture between EDGE, ADSB’s parent company, and Indra, will equip ADSB’s FA-400 offshore patrol vessel with Indra’s advanced 3D Radar, Radar Electronic Support Measures (R-ESM), Communications Electronic Support Measures (C-ESM), and Counter-Unmanned Aerial Systems (C-UAS) jammers, significantly enhancing its operational effectiveness. The agreement was signed by Mr. Ángel Escribano, Executive Chairman of Indra Group and Khaled Al Zaabi, President – Platforms & Systems, EDGE and Chairman of ADSB, at the Naval Defence Exhibition & Conference (NAVDEX 2025) in Abu Dhabi, which runs until 21st February.
Speaking on the occasion, Khaled Al Zaabi said: “As a vessel entirely designed and constructed in the UAE, the FA-400 reinforces our objective of building a portfolio of world-class platforms, fully aligned with the needs of modern defence. Integrating Indra’s advanced radar and electromagnetic systems enhances the FA-400’s capabilities, ensuring resilience and adaptability to meet a range of operational challenges.”
For his part, Ángel Escribano said: “Indra brings decades of expertise in developing high-performance defence technologies, with its 3D Radar, EW, and C-UAS solutions widely recognised for their robust capabilities across challenging operational environments. The integration of our proven systems ADSB’s FA-400 reflects a shared vision to elevate naval defence standards and introduce a new level of sophistication to UAE-built naval vessels.”
The FA-400, equipped with Indra’s advanced radar, electronic warfare, and counter-UAS solutions, is on display at the NAVDEX mooring, providing attendees with an in-depth look at its capabilities. Designed and built entirely in the UAE, the vessel demonstrates exceptional operational versatility, reinforcing its role as a strategic asset in modern naval operations. The integrated naval suite is being delivered through PULSE, the Abu Dhabi-based joint venture between EDGE and Indra, further enhancing local industrial expertise and capability development. (Source: ASD Network)
19 Feb 25. Armada Systems, Inc. (Armada), a provider of technology solutions for the most challenging remote locations around the world, today announced the delivery of a Galleon, its cutting-edge deployable mobile data center, to Naval Information Warfare Center (NIWC) Atlantic in support of a cooperative research and development agreement (CRADA) aimed at advanced network management, command and control, and edge computing solutions.
“With Armada, we believe the Navy will gain a decisive edge in developing technology solutions that directly enhance warfighter readiness,” said Dan Wright, CEO of Armada. “Our mission is to fortify U.S. national security by delivering resilient computing and communications platforms that excel in the most challenging and unpredictable operational environments.”
Armada’s Galleon modular data center will undergo testing and evaluation through a partnership with NIWC Atlantic for U.S. Naval Forces Southern Command / U.S. Fourth Fleet (C4F). Throughout this time, Armada will support the Navy’s testing of the Galleon while providing necessary training to ensure its optimal operation.
“Investments in advanced computing on the edge are crucial to supporting the mission of USNAVSOUTH/FOURTHFLT,” said LCDR Timothy Schettino, 4th Fleet’s Data and AI/ML Innovation Officer. “We are eager to test possible technological solutions working with Navy, Joint, and private industry partners in an effort to identify tactical advantages that will support the warfighter in the most challenging of operational conditions.”
The strategic partnership between Armada and C4F via NIWC Atlantic underscores the shared commitment to fostering technological advancements and operational excellence to support national defense and ensure the U.S. military remains prepared for any future conflict.
19 Feb 25. Cubic DTECH Vocality, Instant Connect Software, and Rally Tactical Systems (RTS) are breaking new ground with the integration of Instant Connect EnterpriseTM (ICE) as the encrypted end-to-end and transport layer security wrapper for tactical push-to-talk traffic. The Joint Interoperability Test Command (JITC)-certified software platform is included on the DoD Information Network (DoDIN)-approved product list. The ICE platform is a proven, military-grade tactical communications solution that integrates with RTS’ Engage Engine and Cubic’s Radio Over IP (RoIP) gateways, including the DTECH Vocality RoIP, M3X and M3-SE, enabling special operations teams worldwide to leverage the blended solution capability for multilingual missions.
“The ICE platform eliminates language barriers, providing real-time communication across 70+ languages to accelerate and clarify crucial communications,” said Anthony Verna, Senior Vice President and General Manager of DTECH Mission Solutions. “The combined solutions remove delays and other drawbacks associated with human translators in the field, thus creating a new standard in coalition interoperable tactical communications.”
“Our platform is secure and accurate, giving warfighters a decisive advantage in coalition peacekeeping, enforcement, and other missions,” said Forrest Claypool, Instant Connect CEO. “Special operations teams know that ICE allows them to extend the language translation capability to remote environments at the tactical edge. It’s about providing teams with the communications flexibility they need when seconds matter.”
19 Feb 25. Global: Keylogger variant points to elevated security, information-theft risks facing Windows users. On 18 February, the cyber security company Fortinet reported that unnamed threat actors are targeting Windows users across the Asia-Pacific and Europe regions with a new version of the ‘Snake’ keylogger malware. Threat actors typically distribute Snake via phishing emails to trick potential victims into opening a malicious link and/or attachment. The attachment contains malicious code that executes the malware as part of a legitimate process, enabling threat actors to remain obfuscated. Snake boasts several additional new and highly sophisticated techniques to evade detection and establish persistence; for instance, it uses the Autolt scripting language to automate deployment and hinder detection by anti-virus tools, underscoring the threat actors’ skillset. This new version of Snake has made at least 280 m blocked infection attempts, highlighting the scale and persistent nature of the campaign. As such, we assess that the security and information-theft risks facing Windows users across the Asia-Pacific and Europe regions will be elevated in the short-to-medium term. (Source: Sibylline)
18 Feb 25. Thailand: Chinese state-sponsored group will raise security, espionage risks for Windows users. Earlier on 18 February, the cyber security company Trend Micro reported that the Chinese state-sponsored group ‘Earth Preta’ (also known as ‘Mustang Panda’) is targeting Thai language-speaking Windows users in a new cyber operation. Earth Preta reportedly uses spear phishing emails to infiltrate targeted systems and to deploy a malicious file containing a malware dropper. The dropper then installs a legitimate application from the video game company Electronic Arts (EA) to plant a modified variant of the ‘TONESHELL’ custom backdoor. TONESHELL checks victims’ systems so as to identify potential anti-virus tools from the security company ESET, exploiting legitimate Microsoft tools to execute the payload. This allows Earth Preta to evade detection and establish persistence, subsequently exfiltrating strategic data and conducting additional malicious activities. We assess this operation showcases the development of the group’s detection-evasion capabilities, underscoring the increased security and espionage risks facing Thailand-based businesses in the long term. (Source: Sibylline)
17 Feb 25. Creomagic Ltd., a leading developer of advanced communication technologies, is set to introduce its latest generation of ultra-compact, high-performance wireless solutions at the upcoming EnforceTac trade fair in Germany. Designed for the demanding requirements of aerial operations, CreoAir advanced Software-Defined Radio (SDR) technology delivers advanced security and connectivity performance across challenging environments. UAVs and aerial systems have become indispensable on the modern battlefield, offering significant tactical advantages but facing unique challenges. These systems require robust, long-range control and seamless interoperability with other units. Compounding this, they often operate in environments prone to interference, spectrum limitations and adversarial threats. Tactical decision-making has become increasingly dependent on real-time video and data from multiple platforms and sensors. As such, reliable, low-latency and secure communications have become critical.
Creomagic’s communication solutions are tailored to meet these needs, providing robust and resilient communication solutions for aerial operations. The CreoAir product line includes high-performance data links with superior data rates designed for various aerial applications, from lightweight, short-range operations to full, military-standard, long-range missions. Leveraging Software-Defined Radios (SDRs) and Mobile Ad-Hoc Network (MANET) technologies, the solutions offer data rates of up to 40 Mbps, adaptive video encoding, seamless integration with diverse interfaces, and simultaneous support for multiple data sources and control of multiple platforms. From a security point of view, CreoAir provides advanced COMSEC and TRANSEC features to ensure resilient, uninterrupted communication. The system incorporates continuous spectrum scanning and analysis, AES-256 encryption, sophisticated frequency hopping, and automatic interference avoidance powered by cognitive SDR and advanced waveforms. These features reduce the likelihood of interception and detection (LPI/LPD) and deliver robust protection against EW threats.
CreoAir Pro, the company’s latest generation of tactical transceivers, meets the ongoing need for compact communication solutions adapted to smaller platforms, along with enhanced performance with regard to range, power, security and video transmission. The new CreoAir Pro merges all the advantages of its predecessors while delivering enhanced computational power and advanced algorithmic processing. CreoAir Pro is fully optimized for future AI-driven operations, enabling dynamic spectrum allocation, real-time decision-making and cognitive networking. Its superior performance with expanded features now comes in a more lightweight and compact form too.
With this minimal form factor and maximum flexibility, the new transceiver is ideal for multi-domain systems, from tactical UAVs to advanced autonomous systems and integrated battle networks. A notable new feature of the CreoAir Pro is its transition to open architecture, which enables shorter development cycles, easier integration with third-party systems, and improved customization options for end users. This framework also allows for smoother and faster software updates, enhancing interoperability and adaptability to meet the dynamic needs of the modern battlefield.
“We are very proud to introduce this latest addition to our range of innovative CreoAir transceivers,” said Alex Shapochnik, CEO of Creomagic. “We believe the advanced computational technology and superior SWaP-C provides an even greater offering for our clients, especially for unmanned aerial systems, while maintaining a competitive price point. Creomagic focuses on long-term partnerships in strategic markets to meet the growing global demand for locally produced equipment. Europe remains a key priority for our marketing and sales, where we aim to establish the right partnerships for joint production, development and tailored solutions,” Shapochnik concluded.
From manned and unmanned aerial networks to personal tactical radios for special forces and first responders, and unmanned ground solutions for robotics, Creomagic continues to develop advanced technologies to support the needs of its diverse client base.
17 Feb 25. Anduril Showcases Advanced Edge Computing and Communications Capabilities at USMC Steel Knight Exercise. Anduril Industries ©Anduril integrated its Menace Family of Systems (FoS) — a suite of edge computing and communications solutions — during the U.S. Marine Corps’ Steel Knight exercise. The exercise sought to integrate multi-domain sensor data to improve maritime domain awareness. Anduril provided the software-enabled sensor aggregation platform and family of Edge Computing and Communications nodes. This demonstration supported the integration of strategic data collection and tactical operations, providing warfighters at the edge with real-time access to data and capabilities once confined to centralized command centers. Traditionally, small tactical units have operated with limited situational awareness, unable to access high-value data streams in a timely manner. Strategic information often passed through slow, top-down processing chains, leaving warfighters without actionable information. Steel Knight changed this paradigm. The Menace FoS enabled seamless data sharing that broke down these barriers, allowing Marines on the ground to access accurate sensor data across multiple domains. This accelerated the decision-making processes for closing complex kill chains in dynamic combat scenarios required on the modern battlefield.
At the heart of this exercise were three expeditionary Menace systems, each tailored to unique operational needs: a command-and-control (C2) shelter, an expeditionary vehicle, and a new man-portable variant. Together, these systems demonstrated their roles in supporting the Marine Corps’ Expeditionary Advanced Base Operations (EABO) concept. The C2 shelter system was transported via KC-130 and became operational within minutes of being unloaded on the airfield, enabling aviation units to securely plan and execute intelligence, surveillance, reconnaissance, and counter-reconnaissance missions. The expeditionary vehicle system, designed for rapid deployment aboard the MV-22 Osprey, empowered Marines to aggregate and process multi-domain sensor data into actionable information. Complementing these, the man-portable variant, integrated on a maritime reconnaissance platform, delivered rugged communications and computing capabilities, ensuring seamless integration of critical data across the tactical combat network.
Steel Knight marked the first time the Menace FoS operated as a unified network, integrating strategic and tactical nodes into a cohesive data mesh, the Lattice Mesh. Unlike traditional systems that isolate command and control, communications, and operational data into separate silos, Menace unifies these capabilities into an agile, expeditionary and scalable solution. This integration not only reduced logistical complexity but also expedited deployment timelines and enhanced situational awareness, all of which are vital for operations in contested environments. The exercise demonstrated how warfighters can now conduct mission planning and integrate sensors to achieve real-time maritime domain awareness across austere and disconnected environments — scenarios previously thought too challenging for such capabilities. By proving that complex data aggregation can be executed directly at the tactical edge, Menace redefines what is possible for modern warfare. Whether deployed as a secure facility, mobile platform, or man-portable system, the Menace FoS offers scalable, expeditionary solutions tailored to the evolving needs of the joint force. As the U.S. military continues to innovate in force design and operational concepts, Anduril remains at the forefront, committed to delivering advanced technologies that meet the demands of today’s warfighters while anticipating the challenges of tomorrow. (Source: ASD Network)
14 Feb 25. Cyber Update Key points.
- A surge in cyber attacks against high-profile large language model (LLM) platforms underscores the increased security and financial risks facing firms.
- A large-scale data breach has sustained the elevated security and disruption risks stemming from the pro-Iran hacktivist group ‘Handala.’
- A cyber espionage operation against Windows users in Ukraine underscores the increased security risks stemming from the Russian state-sponsored group ‘Sandworm.’
- A cyber campaign against global suppliers within the manufacturing sector points to the heightened security and espionage risks stemming from an unnamed Chinese state-sponsored group.
- A long-term cyber operation has increased the security and operational risks for firms stemming from an unnamed sub-group of the Russian state-sponsored group Sandworm.
Technical analysis of weekly stories
The Russian state-sponsored group Sandworm has targeted Windows users in Ukraine in a cyber espionage operation since at least late 2023. The campaign comprises at least seven activity clusters displaying similar tactics. The latest activity reportedly used typo-squatted domains to emulate legitimate websites to infiltrate targeted systems, though it is unclear how the group first distributed the malicious domains. Sandworm then uses a fake Microsoft Key Management Service (KMS) activation tool to display a fake Windows pop-up; this is used to trick victims into unknowingly downloading a malware loader onto their systems (‘BACKORDER’) while feigning legitimacy. BACKORDER subsequently disables Windows Defender security mechanisms to evade detection, before deploying the ‘Dark Crystal’ remote access trojan (RAT) payload. This enables Sandworm to establish communication with command-and-control (C2) infrastructure and exfiltrate sensitive information (including screenshots, keystrokes, browser cookies, credentials and credit card details). In some instances, the group has also deployed a new custom backdoor (‘Kalambur’) onto compromised systems via fake Windows updates to establish communication with C2 servers and download additional malicious payloads. The backdoor uses The Onion Router (Tor) for C2 communication to obfuscate its traffic, highlighting the sophistication of the group’s detection-evasion techniques. This operation signals a continuation in the creation of fake services emulating legitimate providers by Russian state-sponsored actors amid ongoing cyber espionage operations against Ukraine-based businesses as the war in that country persists.
An unnamed sub-group of Sandworm has conducted a long-term cyber operation (‘BadPilot’) to infiltrate global organisations since at least 2021. The subgroup reportedly obtains access to targeted organisations on behalf of Sandworm, establishing persistence, command execution and lateral movement before passing access over to Sandworm. During 2022, the sub-group primarily focused on infiltrating Ukraine-based companies in the energy, retail, consulting and education sectors, while in 2023, it expanded its operations to include Central Asia, Europe, the Middle East and the US. The threat actors have also exploited several software vulnerabilities to compromise vulnerable organisations indiscriminately, oscillating between broad-scope and more targeted operations. Other initial attack vectors have included social engineering techniques, trojanised software and supply chain compromises. In 2024, the sub-group also started deploying remote management and monitoring (RMM) tools to achieve persistence and deploy additional malicious payloads. Unlike other malware types, the sub-group’s RMMs are disguised as legitimate files to evade detection. The threat actors also use web shells to maintain persistence and communicate with C2 servers, pointing to the group’s capabilities. Some of the sub-group’s other techniques include the post-compromise exploitation of sign-in portals to steal credentials and facilitate lateral movement, as well as using Tor to remain obfuscated.
Some non-exhaustive recommendations to mitigate against these threats include:
- Monitor devices and networks for suspicious activity
- Add available Indicators-of-Compromise (IoCs) to your organisation’s security detection systems to detect potentially malicious samples on the network; configure firewalls to block outbound communication to malicious IP addresses associated with known malware
- Adopt behaviour-based end-point detection and response (EDR) solutions, prioritising the detection of the initial stages of a compromise
- Conduct cyber hygiene awareness courses for users, enabling them to recognise and report phishing and other types of social engineering
- Enact robust vulnerability management policies to manage and patch software vulnerabilities
Our cyber word(s) of the week: Web shell (Source: Sibylline)
14 Feb 25. Global: Long-term cyber operation raises security risks posed by Russian state-sponsored groups. On 12 February, the technology company Microsoft disclosed that an unnamed sub-group of the Russian state-sponsored group ‘Sandworm’ has conducted a long-term cyber operation to infiltrate global organisations since at least 2021. The sub-group reportedly obtains access to internet-facing infrastructure by exploiting software vulnerabilities, social engineering techniques, supply chain compromises and trojanised software. The group then uses web shells and other tools to maintain persistence, communicate with actor-controlled infrastructure and move laterally within compromised systems to streamline Sandworm’s cyber operations. In 2022, the sub-group primarily helped facilitate cyber espionage and disruptive operations against infrastructure in Ukraine amid the ongoing war. The sub-group’s victimology and arsenal have since shifted, showcasing its resources and ability to rapidly adapt to Moscow’s strategic objectives. As the sub-group has most recently targeted entities in Australia, Canada, the UK and the US, long-term security and operational risks to organisations remain. (Source: Sibylline)