Full Report
Image: Shutterstock What’s new: Reports of commercial airliners’ GPS jammed yesterday near Los Angeles and San Diego. The week before a panel at ION GNSS+ in Orlando, FL warned that GPS spoofing has become a “global aviation disease.” Why it’s important: GPS interference distracts crews and erodes safety margins. It can alter flight paths and impact a wide range of on-board systems. What else to know: GPS jamming has already led to the death of 38 people aboard an Azerbaijan Air flight and was a factor in the loss of 4 lives in the crash of a medical transport aircraft in New Mexico. No other GNSS is currently approved for use in commercial aircraft. Even if it were, it probably would not have made a difference in the Azerbaijan Air and New Mexico incidents because the GNSS frequencies are clustered together and it is easy to jam all of them […]
Analysis Summary
# Incident Report: Global Escalation of GNSS Jamming and Spoofing Operations
## Executive Summary
Multiple commercial aircraft, including United Airlines and American Airlines flights, experienced severe GPS jamming and spoofing incidents near major U.S. hubs (Los Angeles/San Diego) and internationally. These incidents involve the corruption of Position, Navigation, and Timing (PNT) data, leading to diverted flights, degraded safety margins, and false cockpit alerts. The trend represents a "global aviation disease" with confirmed lethal consequences in recent years.
## Incident Details
- **Discovery Date:** September 24–25, 2026
- **Incident Date:** September 23–25, 2026 (Ongoing)
- **Affected Organization:** United Airlines (UA1962, UA1866), American Airlines (AA167)
- **Sector:** Aviation / Critical Infrastructure
- **Geography:** Los Angeles/San Diego (Offshore), Baltic States, Poland, and New Mexico (historical reference)
## Timeline of Events
### Initial Access
- **Date/Time:** September 23–25, 2026
- **Vector:** Radio Frequency (RF) Interference / Signal Injection
- **Details:** Unauthorized high-power RF signals overrode legitimate GNSS satellite signals, targeting commercial air corridors.
### Lateral Movement
- **N/A:** The attack does not move through a traditional computer network; instead, it propagates through the aircraft's integrated avionics suite as corrupted data flows from the GPS receiver to other PNT-dependent systems.
### Data Exfiltration/Impact
- **Data Integrity Loss:** On-board systems received corrupted PNT data.
- **System Impact:** Disruption of Traffic Collision Avoidance Systems (TCAS) and Terrain Awareness and Warning Systems (TAWS).
- **Operational Impact:** American Airlines Flight 167 aborted a Pacific crossing; United flights reported severe interference near LAX.
### Detection & Response
- **Detection:** Discovered via real-time monitoring on `gpsthreatmap[.]com` and pilot observations of system anomalies (e.g., Airbus A350 false "pull-up" commands at 41,000 ft).
- **Response:** Flight crews diverted aircraft to original departure points or relied on non-GNSS navigation; industry experts convened at the ION GNSS+ conference to issue global warnings.
## Attack Methodology
- **Initial Access:** RF Jamming (denial of service) and Spoofing (injection of false signal data).
- **Persistence:** Continuous broadcasting of interference from terrestrial or mobile electronic warfare units.
- **Defense Evasion:** Signals are designed to mimic legitimate GNSS constellations, making it difficult for standard receivers to distinguish between real and fake data until PNT anomalies occur.
- **Impact:** Forced cockpit confusion, erosion of pilot trust in automated systems, and potential for controlled flight into terrain (CFIT).
## Impact Assessment
- **Financial:** High; includes costs of diverted long-haul flights (fuel, crew time, passenger re-accommodation).
- **Data Breach:** None; however, PNT data integrity was completely compromised.
- **Operational:** Significant disruption to flight paths and safety margins in high-traffic U.S. airspace.
- **Reputational:** Public concern regarding the safety of commercial aviation against electronic warfare.
## Indicators of Compromise
- **Behavioral Indicators:**
- Discrepancies between GPS-derived position and inertial navigation systems.
- Unwarranted Terrain Awareness and Warning System (TAWS) alerts.
- Systematic "pull-up" commands issued by TCAS despite clear airspace.
- GPS signal loss or "No Fix" status in specific geographic zones (e.g., LAX offshore).
## Response Actions
- **Containment:** Pilots transitioning to manual navigation and non-GNSS backup systems where available.
- **Eradication:** Coordination with regulatory bodies (FAA/FCC) to identify and neutralize the source of terrestrial jamming signals.
- **Recovery:** Diversion of affected aircraft to safe landing zones.
## Lessons Learned
- **System Fragility:** Commercial aviation is overly dependent on a single PNT source (GPS) without approved multi-constellation backups.
- **Interference Cascades:** Spoofing a single frequency can trigger high-priority safety alerts that distract crews during critical phases of flight.
- **Clustered Vulnerabilities:** Because GNSS frequencies are clustered, jammers can easily disable multiple systems (GPS, GLONASS, Galileo) simultaneously.
## Recommendations
- **Resilience:** Accelerate the approval and implementation of "Resilient PNT" frameworks that utilize non-satellite-based timing and positioning.
- **Hardening:** Update cockpit software to better detect and flag spoofed PNT data before it triggers automated safety systems.
- **Policy:** Increase government and industry collaboration to deploy terrestrial backups to GPS to ensure continuity of operations during RF interference events.