https://www.thespacereview.com/article/5234/1
"It is a Tuesday morning in the late 2020s. At a satellite operations center on
the Eastern Seaboard of the United States, a duty controller is halfway through
a coffee when the first telemetry anomaly arrives. A spacecraft in the
operator’s mid-inclination shell, one of several thousand small satellites at
an altitude of roughly 550 kilometers, has failed to acknowledge a routine
stationkeeping burn. Ninety seconds later, a second satellite in an adjacent
orbital plane reports the same fault. Then a third. In a cascade that takes
less than four minutes to develop, 200 satellites across three commercial
megaconstellations stop responding to maneuver commands.
The on-call engineer assumes a software regression and begins a rollback. The
rollback fails. The propulsion controller on each affected satellite is no
longer accepting authenticated commands. Telemetry continues to flow. Position
reports continue to arrive. The actuators are inert. A senior systems
architect, woken at home, is the first person in the building to use the word
“intrusion.”
The intrusion did not begin that Tuesday. It began 13 weeks earlier, when a
contractor working on ground segment integration opened a spear-phishing email
purporting to come from a regulatory body. The credentials harvested from that
single compromise gave the attacker a foothold on a development network. From
there, the path to a production telemetry, tracking, and command gateway took
patience rather than brilliance. By the time the dormant payload triggered, it
had already been signed by the satellites’ own update infrastructure. It
overwrote the firmware governing the propulsion subsystem on each compromised
spacecraft with a near-identical image that alters the cryptographic checks
performed before a thrust command would execute. Every command from the
legitimate operator would now be received, logged, and silently rejected.
By 17:00 UTC on the same day, the first conjunction warning involving two of
the affected spacecraft was issued. The predicted miss distance was 412 meters.
Under normal circumstances, a small avoidance burn would have resolved it. On
this Tuesday, the operator could only watch.
In the language of orbital mechanics, 200 satellites had ceased to be
operational and had become, in a single coordinated instant, debris with
telemetry."
Via Susan ****
Cheers,
*** Xanni ***
--
mailto:xanni@xanadu.net Andrew Pam
http://xanadu.com.au/ Chief Scientist, Xanadu
https://glasswings.com.au/ Partner, Glass Wings
https://sericyb.com.au/ Manager, Serious Cybernetics
