Aerospace & Aviation — Cyber Threat Activity

Threat actors, incidents and malware targeting the Aerospace & Aviation sector — 1 recorded incident and 30 tracked groups.

• Recorded incidents: 1
• Incidents, trailing 180 days: 1
• Tracked threat actors: 30
• Malware families: 149

All sectors

Threat actors targeting Aerospace & Aviation

• INC Ransom 1 incident
• APT1 researched targeting
• APT28 researched targeting
• APT40 researched targeting
• Dragonfly researched targeting
• AeroBlade researched targeting
• Ajax Security Team researched targeting
• APT18 researched targeting
• APT20 researched targeting
• APT27 researched targeting
• APT3 researched targeting
• APT33 researched targeting
• APT5 researched targeting
• Chimera researched targeting
• HEXANE researched targeting
• LazyScripter researched targeting
• Leafminer researched targeting
• Mirage Kitten researched targeting
• MirrorFace researched targeting
• Putter Panda researched targeting
• Sidewinder researched targeting
• Space Pirates researched targeting
• Strider researched targeting
• TA2541 researched targeting

Malware used against Aerospace & Aviation

Families used by the threat actors that target this sector, derived from actor tooling rather than observed in these incidents directly.

• Agent Tesla Malware
• Cobalt Strike Malware
• Impacket Tool
• Mimikatz Tool
• PlugX Malware
• PsExec Tool
• AsyncRAT Tool
• BloodHound Tool
• China Chopper Malware
• Empire Tool
• gh0st RAT Malware
• LaZagne Tool

Where these victims are

• Côte d'Ivoire 1

Recent incidents

• Air Côte d'Ivoire 2026-02-08

Coverage. 76.7% of incidents in our log carry a sector classification; the remainder name a victim we have not placed in an industry. Counts here are a floor, not a total, and are not comparable between sectors of different sizes.

Read the full analysis on IntelFusions