Malicious Software Update Disrupts German Military Drone Operations

German defence technology company Quantum Systems has confirmed that a cyberattack targeting its software update distribution server disrupted unmanned system operations in late October.

The company detected the incident, which involved the distribution of a malicious QBase update file. QBase is the mission-planning and ground-control software used to operate Quantum Systems’ reconnaissance and interceptor drones.

The compromise led to operational disruptions, with reports indicating the German armed forces grounded the company’s systems as a precaution. This grounding reportedly excluded Quantum Systems’ technology from a recent military exercise. The Vector reconnaissance drone, referred to as Falke in German military service, was among the aircraft whose missions are planned using the compromised QBase software.

Investigation into Supply Chain Compromise

Quantum Systems is working with state authorities to investigate the breach. The response involves the German military counterintelligence service (MAD), the domestic intelligence service (BfV), and the Federal Office for Information Security (BSI).

The company believes it was targeted due to its recent commitment to support Ukraine, which includes funding to manufacture tens of thousands of interceptor drones for Ukrainian forces. Quantum Systems stated that companies providing critical support to Ukraine are increasingly being targeted by hostile actors because their work is essential to customer security.

This incident follows a similar pattern of targeting within the unmanned aerial vehicle (UAV) sector. In July, the Australian manufacturer CubePilot, which also openly supports Ukraine, was targeted by a DNS hijacking attack that caused significant operational disruption.