Supply chain attacks on satellites: how trojanized equipment gets into space and what it can do. π°οΈπαα||απ΄ββ οΈπ€«
A group of academic security researchers from the University of New Mexico, USA, published their analysis of supply chain attacks on small satellites last year. Their findings required an update to the SPARTA (Space Attack Research and Tactic Analysis) framework with a new detection-evasion technique!
The authors proved that small satellites can be vulnerable not because their core flight software is weak, but because trusted third-party components may be compromised or contain malicious content.
What is the risk? Malware can stay under the radar, activate based on time or sensor data, coordinate with other infected components, steal telemetry, disrupt operations, or cause denial-of-service behavior.
Interesting indeed, especially considering how many third-party components have recently been shipped into space... Stay safe, and donβt look up!
More details:
SpyChain: Multi-Vector Supply Chain Attacks on Small Satellite Systems [PDF]: https://arxiv.org/abs/2510.06535
