Mysterious Hackers Targeted Space Telescopes

• September 6th, 2023
Data Privacy, Data Protection, Online Privacy, Online Safety, Ransomware

Recent cyber attacks on major astronomy observatories have cast a dark shadow over our attempt to unravel the mysteries of the cosmos. With two significant telescopes in Hawaii and Chile facing disruptions, the incident underscores the growing need for enhanced cybersecurity measures in the field of astronomical research.

The International Gemini Observatory operates two major telescopes: the Gemini North Telescope in Hawaii and the Gemini South Telescope in Chile. These powerful tools enable researchers to obtain a near-complete view of the night sky, contributing to crucial discoveries such as the observation of supernovae births and identification of the closest-known black hole to Earth.

Both Gemini telescopes halted operations due to an unexpected cyber attack, with several smaller telescopes also disrupted. The precise nature and motive behind the cyber incident remain veiled in mystery. This attack not only halted operations but also threw off the precisely scheduled observations, causing potential long-term impacts on research projects, doctoral theses, and other academic endeavors.

Such disruptions bear a dual cost: the immediate loss of research data and the broader setback to scientific advancements. A day of non-operation translates to a loss of invaluable data that might never be retrievable due to the nature of astronomical events.
Beyond the direct impacts on research, the incident raises pressing questions. Why target astronomical research? Was the motive purely monetary, with hopes of ransom, or was there a larger, more sinister intent in play? With American officials highlighting the vulnerability of space-based communications in international conflicts, these attacks could be seen as a precursor to larger threats against space-based assets crucial to national security.

Following the attack, NOIRLab, which oversees the Gemini observatories, has been proactive. Collaborating with cybersecurity experts, the lab aims to restore functionality and online access as soon as possible. Some telescopes are being operated manually, preserving a semblance of normalcy. Additionally, in an innovative move, NOIRLab has proposed sending a team of graduate students to Chile to resume in-person observations.

This isn’t the first instance of ransomware targeting observatories. In the previous year, the Atacama Large Millimeter Array (ALMA) Observatory in Chile was subjected to a ransomware attack, rendering it offline for nearly 60 days. The increasing frequency of such events emphasizes the urgent need for robust cybersecurity measures in research facilities.

As a precautionary step, professionals in the space sector are now advised to monitor for unusual network activities, actively search for potential breaches, and safeguard crucial intellectual properties. This growing threat underscores that even the vast expanses of the universe aren’t safe from the shadows of the digital realm.