The Claim and the Denial
In March 2022, a hacktivist group calling itself Network Battalion 65—an offshoot of Anonymous—claimed it had breached Russia’s space agency, Roscosmos. Their goal: cripple satellite imaging systems used to support the invasion of Ukraine. They backed up the boast with leaked documents and data, alleging they had taken down the agency’s vehicle monitoring system and doxed proprietary files.
The response from Roscosmos was a flat denial. And for most of the world, the story faded fast. That’s partly because the technical details of the attack were buried in jargon and partly because, well, both sides had incentive to spin. But a new paper from researchers Rajiv Thummala and Gregory Falco digs into the evidence NB65 actually released—and finds the breach was likely real.
How the Breach Likely Happened
The researchers reverse-engineered the leaked data to identify the probable vulnerabilities. Their conclusion: NB65 didn’t need zero-days or state-level resources. They likely exploited misconfigured internet-facing systems and weak authentication in Roscosmos’s ground segment—the terrestrial networks that command satellites. Once inside, they pivoted to space segment interfaces, gaining access to telemetry and imagery databases.
This is the kind of attack that keeps space security experts up at night. Not because it was sophisticated—it wasn’t. But because it shows how fragile the line between ground and space really is. A hacktivist group, armed with little more than patience and public tools, managed to reach operational space assets.
The Uncomfortable Lesson for Aerospace
The lesson for the global aerospace community is uncomfortable but clear: space security isn’t just about shielding satellites from jamming or lasers. It’s about locking down the mundane stuff—patch management, access controls, network segmentation. If a group like NB65 can waltz into Roscosmos, the same playbook could work against commercial constellations, defense satellites, or scientific missions.
What this means: The next big space breach won’t come from a nation-state. It’ll come from a bored activist who found an open port. And by the time the industry takes that seriously, the damage will already be orbital.
*Originally reported by [SpaceSecurity.info](https://www.spacesecurity.info/en/hacktivism-goes-orbital-investigating-nb65s-breach-of-roscosmos/). Adapted and republished with editorial context for SpaceSecurityNews.*
