Maritime Sector Under Siege: GPS Spoofing and Connected Vessel Attacks

Maritime industry (90% of global trade) facing escalating cyber incidents. What's brutal: 23,400 malware detections and 178 ransomware attacks across 1,800 vessels in H1 2024 alone, causing operational standstills and millions in recovery costs. GPS jamming/spoofing surging in Black Sea and Persian Gulf—state actors spoof signals to mislead ships into territorial waters triggering legal disputes and insurance claims. Modern vessels are floating factories with 50/50 IT/OT split: bridge systems manage propulsion/engines/steering, engine room controls machinery, mid-level SCADA handles cargo operations. IIoT devices permeate all levels creating attack surfaces. What's nasty: infection vectors include nautical charts downloaded to officer laptops then transferred via USB (no malware scanning), port Wi-Fi and cellular connections within 12 miles of shore, Starlink providing persistent connectivity. Documented cases: ransomware spreading through port connections immobilizing ships for days. First half of 2024 saw 73% of cyber incidents impact OT systems (up from 49% year prior).