Actor Claims Airbus DevOps Access and Offers Allegedly Exfiltrated Files for Sale
Summary
A threat actor claims to have accessed Airbus SE’s DevOps environment for over two months and is offering files allegedly taken from a JFrog Artifactory instance, including build artifacts and development files tied to Airbus Helicopters projects.
Key points
- A threat actor claims to have maintained undetected access to Airbus SE’s DevOps environment for more than two months.
- The actor is reportedly attempting to sell files allegedly exfiltrated from an Airbus JFrog Artifactory instance.
- The reported file listings include build artifacts, dependencies, source-code assemblies, project files, and checksums.
- Some listed artifacts are tied to Airbus Helicopters and projects including elogcard, ged, hcommunity, keycopterneo, and newsroom.
- The article provides no independent confirmation of access, exfiltration, or the authenticity of the listed files.
Article Details
- Victim Organization
- Airbus SE
- Incident Type
- Alleged unauthorized access to a DevOps environment and attempted sale of files reportedly exfiltrated from a JFrog Artifactory instance.
- Data Types Exposed
- Software build artifacts and dependencies
- Internal source code assemblies
- Build configuration files
- Checksum files
- Operational Impact
- The actor claims to have maintained undetected access to the DevOps environment for over two months. No operational disruption is reported.
- Ransom Or Extortion
- The actor is attempting to sell files claimed to have been exfiltrated. No ransom demand is reported.
- Claim Status
- claimed