Cyber Security News

Russian Airline Hit by Cyberattack, Website and Systems Disrupted

Russian regional carrier KrasAvia is grappling with a major IT outage after what appears to be a cyberattack. Passengers have been unable to buy tickets online, and flight operations have been forced to switch to manual procedures.

The airline confirmed the disruption to local media but has not provided a timeline for restoring normal service.

Online Booking Completely Down

Since early Friday, KrasAvia’s website has been inaccessible. Potential travelers trying to reserve seats on flights see only error messages.

The airline’s press office told NGS24.RU that the site outage is preventing any online ticket sales. Customers who contact the airline are being redirected to offline ticket offices and travel agencies to purchase their flights.

The shutdown has caused frustration among passengers who rely on digital bookings for convenience and last-minute travel plans.

In addition to the booking failure, KrasAvia has switched all flight planning and aircraft management tasks to manual control.

Flight plans, crew assignments, and aircraft dispatch documents that are normally processed by software systems are now handled on paper. The airline emphasized it is doing everything possible to minimize the impact on schedules.

According to the press office, “We are working around the clock to avoid and reduce consequences. All flights are now in manual mode for flight management and flight assignments.”

Pilots, ground staff, and dispatchers have had to follow extra steps to ensure each journey meets safety standards.

No flights have been canceled so far, but delays are possible if manual tasks take longer than usual.

KrasAvia has not officially confirmed that a cyberattack caused the disruption, stating only that an investigation is under way.

KrasAvia’s website has been inaccessible

However, a report on the Borus Telegram channel shared a now-deleted screenshot of KrasAvia’s homepage, suggesting an intentional hacking incident.

The airline’s spokesperson compared the situation to a July attack on Russia’s largest carrier, Aeroflot, which faced a powerful cyber intrusion this summer. At that time, Aeroflot struggled with similar IT outages before gradually restoring its systems.

At present, KrasAvia has not announced when its website will return to normal operation. The company said that any updates would be posted on its own communication channels once available.

Passengers are advised to check with offline agents for ticket purchases and to stay alert for notifications on social media or local news outlets.

As cyber threats continue to target critical infrastructure, the aviation sector remains a high-profile victim.

The KrasAvia incident underscores the importance of robust cybersecurity measures and rapid response plans to keep both passengers and operations safe.

Passengers seeking more information can follow NGS24.RU’s Telegram channel and VKontakte group for real-time updates.

Find this Story Interesting! Follow us on LinkedIn and X to Get More Instant Updates.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago