Cyberattack investigation into GNV ferry underway

France has launched a probe into a potential cyberattack against Italian shipping firm GNV's Fantastic ferry, which travels from Ste and North Africa, after being alerted by Italian authorities regarding a thwarted cyberespionage intrusion allegedly conducted by a Latvian and a Bulgarian sailor, with the former already indicted for conspiracy to serve a foreign power, attempted computer system compromise, and possession of devices causing navigation system interference, according to Security Affairs.

Investigation into the incident has been centered on possible malware injection into the ferry's IT systems enabling remote control of the ship, with the media reporting a focus on Russia amid hybrid attacks across Europe, while the Fantastic ferry has been returned to sea after being temporarily sealed for safety inspections. Such a threat of remote compromise has been downplayed by maritime cybersecurity expert Olivier Jacq.

"The computer systems that control ships are not, by default, connected to the internet. Very few onboard computers have permanent connections. The risk that a ship could be remotely controlled is near zero because it is extremely difficult to implement," said Jacq in an interview with French newspaper Le Parisien.