ATNS

Ransomware-linked malware surfaced inside the operational technology network feeding weather data to ATNS, the South African operator covering roughly a tenth of the world's airspace. ATNS believes its own team stopped the attack, yet its forensics RFQ still chases a second, possibly insider, theft of data and exfiltration to addresses in China, with no stated start date for the intrusion.