The Quantum Systems cyberattack reportedly prompted Germany’s armed forces to ground the manufacturer’s drones and leave them out of a military exercise. The German defense company confirmed it detected the attack in late October and worked with authorities so its unmanned systems could safely return to service.

Reports citing internal sources traced the incident to a malicious update for QBase, the software customers use to plan missions and control aircraft from the ground. The update reached customers outside the usual release schedule. Its arrival alerted the company, although the number of customers who installed the file remains unclear.

Reports trace the incident to a QBase update

According to those accounts, the attackers compromised the server Quantum Systems uses to distribute software updates. One aircraft that relies on QBase for mission planning is the Vector reconnaissance drone. Germany’s armed forces operate it under the name Falke.

The reported grounding was a precaution. German forces kept the company’s systems out of a recent exercise while authorities assessed the incident. The accounts did not specify how long the restrictions lasted or whether the affected software disrupted any flights already underway.

Germany’s military counterintelligence service, domestic intelligence service and federal cybersecurity agency reportedly took part in the response. Quantum Systems confirmed that it was cooperating with state authorities. Its public statement gave few technical details about the attack.

Quantum Systems suspects a link to its support for Ukraine

In October, Germany announced funding to build tens of thousands of Quantum Systems interceptor drones in Ukraine for Ukrainian forces. The company believes that its public support for Ukraine made it a target. It also described sustained pressure on European defense manufacturers from cyberattacks over several years. However, it did not identify a group or government behind the Quantum Systems cyberattack.

Another drone manufacturer that supports Ukraine faced a separate incident in July. Attackers hijacked domain name system traffic at Australia’s CubePilot, causing severe disruption. Investigators did not confirm that CubePilot customers received malicious software updates. In the German case, by contrast, an unexpected update reaching customers was the event that reportedly drew attention to the breach.


0 responses to “Quantum Systems cyberattack disrupts German drone operations”