Aviation Industry facing Ransomware Headwinds

This report summarizes a series of ransomware attacks against aviation organizations in 2022, attributing incidents to groups such as Daixin Team, ALPHVM/BlackCat, Ragnar Locker, and LockBit; it details data exfiltration volumes (hundreds of GBs to millions of records), attacker techniques (credential compromise, VPN exploitation, Active Directory compromise, double extortion), operational and reputational impacts, recommended mitigations, and includes Daixin Team file/hash IOCs.