Lyce · Hybrid Watch
hw_c3ed4f0697dfbc22
Pro-Russian “Killnet” hackers knock more than a dozen U.S. airport websites offline via DDoS attacks.
Public websites for more than a dozen major U.S. airports were temporarily taken offline by distributed-denial-of-service (DDoS) attacks, with the Russian-speaking hacktivist collective Killnet claiming responsibility. The attacks targeted public-information portals, including LaGuardia and Chicago O’Hare, making it difficult for travellers to access data on wait times and capacity, even though core airport operations such as air-traffic control and internal communications were reportedly unaffected. U.S. officials described the incident as a “denial of public access” event rather than a safety-critical systems breach, yet it demonstrated Killnet’s ability to coordinate simultaneous strikes on multiple transport targets. Cybersecurity analysts and U.S. agencies have characterised Killnet as a pro-Kremlin group whose operations align with Russian interests, blurring the boundary between state and non-state actors in Moscow’s wider hybrid toolbox. The October campaign followed Killnet’s earlier calls on Telegram for attacks against Western critical infrastructure in states supporting Ukraine, and it coincided with similar DDoS incidents against German rail communications. While the technical impact on U.S. airports was limited and short-lived, the highly visible nature of the target ensured media coverage and public awareness disproportionate to the immediate damage.
Attribution
Official
Facts
No facts
Sources
-
- Role
- Discovery lead
- Publication
Public websites for more than a dozen major U.S. airports were temporarily taken offline by distributed-denial-of-service (DDoS) attacks, with the Russian-speaking hacktivist collective Killnet claiming responsibility. The attacks targeted public-information portals, including LaGuardia and Chicago O’Hare, making it difficult for travellers to access data on wait times and capacity, even though core airport operations such as air-traffic control and internal communications were reportedly unaffected. U.S. officials described the incident as a “denial of public access” event rather than a safety-critical systems breach, yet it demonstrated Killnet’s ability to coordinate simultaneous strikes on multiple transport targets. Cybersecurity analysts and U.S. agencies have characterised Killnet as a pro-Kremlin group whose operations align with Russian interests, blurring the boundary between state and non-state actors in Moscow’s wider hybrid toolbox. The October campaign followed Killnet’s earlier calls on Telegram for attacks against Western critical infrastructure in states supporting Ukraine, and it coincided with similar DDoS incidents against German rail communications. While the technical impact on U.S. airports was limited and short-lived, the highly visible nature of the target ensured media coverage and public awareness disproportionate to the immediate damage.