---
title: "Cyber Espionage Group Targets Aviation Firms to Steal Map Data"
url: https://daily.dev/posts/cyber-espionage-group-targets-aviation-firms-to-steal-map-data-hrerxkssk
source_url: https://www.darkreading.com/vulnerabilities-threats/cyber-espionage-group-aviation-firms-steal-map-data
type: article
source: "Dark Reading"
published: 2026-05-11T12:13:16.890Z
updated: 2026-05-11T12:13:47.962Z
tags: ["malware", "phishing"]
reading_time: 5
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Cyber Espionage Group Targets Aviation Firms to Steal Map Data

**[Dark Reading](https://daily.dev/sources/dr)** · 5 min read · 0 upvotes · 0 comments

## Summary

A cyber espionage group dubbed HeartlessSoul is targeting aerospace firms and drone operators to steal geospatial mapping data, including GIS files, terrain models, and GPS data. The group uses phishing, malvertising, fake software installers, and a fraudulent SourceForge project to compromise systems. Techniques include a JavaScript RAT, PowerShell scripts, and a Windows shortcut zero-day exploit (ZDI-CAN-25373). Victims are primarily Russian government and enterprise entities. Attribution remains uncertain, with Russian firms linking the group to 'Versatile Werewolf' and possibly pro-Ukrainian actors. Security experts recommend zero-trust access controls and network segmentation for systems handling crown-jewel GIS data.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.darkreading.com/vulnerabilities-threats/cyber-espionage-group-aviation-firms-steal-map-data>

## Similar posts on daily.dev

- [Lazarus group targets European drone makers in new espionage campaign](https://daily.dev/posts/lazarus-group-targets-european-drone-makers-in-new-espionage-campaign-2vahjx90k) · CSO Online · 1 upvotes · 0 comments

---

Tags: [#malware](https://daily.dev/tags/malware), [#phishing](https://daily.dev/tags/phishing)

[View this post on daily.dev](https://daily.dev/posts/cyber-espionage-group-targets-aviation-firms-to-steal-map-data-hrerxkssk)
