← All talks

Viasat Hack: Russian Attack on Wind Turbines Revealed #shorts

BSides Frankfurt1:33116 viewsPublished 2026-04Watch on YouTube ↗
About this talk
A cyberattack targeting satellite infrastructure led to a massive outage of 4,500 wind turbines, just before a major global event. The compromised firmware affected terminals across regions, revealing a vulnerability previously underestimated. #Cyberattack #Viasat #WindTurbines #CyberSecurity #IncidentResponse
Show transcript [en]

Fast forward another 4 years. Uh some of said terminals were installed on on German wind turbines and suddenly uh the the energy provider E.ON faced an outage of like 4 and 1/2 thousand of their wind turbines. Um this was the evening before Russia invaded Ukraine. So um the Russians deployed an attack against the the Viasat satellite infrastructure and compromised um the the firmware of roughly 45,000 of these end user terminals uh deployed in Ukraine, but also in the region. Germany is obviously part of that region. Um And so suddenly 1 year later, we see the the vice president and CISO of Viasat on stage at Black Hat uh with a lady from the NSA giving a nice talk

about how they did incident response. It was quite funny to watch. Especially if you track down basically this and you see that actually the things affected by this were known. This was no secret. This is like an underestimation of effort someone wants to take if they really want to damage something. Um in this case, it was the Russians. Um and they basically got into the VPN, jumped through a couple of networks, did a custom DOS attack on an internal protocol, and also deployed this custom malware to the to the modems via an over-the-air update functionality over the satellites.