NOTIFY ISSUE #72 (PUBLIC) - WEEKLY THREAT INTELLIGENCE - Webflow
←
→
Page content transcription
If your browser does not render page correctly, please read the page content below
NOTIFY ISSUE #72 (PUBLIC) WEEKLY THREAT INTELLIGENCE 28 April 2021 | v1.0 RELEASE
Notify – Threat Intelligence
Public Issue #72, 04/2021
DOCUMENT CONTROL
PREPARATION
DroneSec (dronesec.com)
Threat Intelligence Team
Email: info@dronesec.com
NOTIFY – UNRESTRICTED PAGE 2 OF 13Notify – Threat Intelligence
Public Issue #72, 04/2021
EXECUTIVE SUMMARY
The GDSN #3 Day 2 is occurring today!
The GDSN is a non-sponsored event which brings the best-of-breed Cyber-UAV security, UAS Threat
Intelligence, Counter-UAS and UTM security minds into one place. It will be fully remote, accessed
online and suitable to multiple time zones.
GDSN continuous tonight after Day 1 saw some amazing speakers on excellent topics covering drone
detection, security, protection and UTM security.
Join us on the live-stream: https://youtu.be/2fVT6CQ8GgA
------
Please enjoy this early, featured GDSN edition for PUBLIC release.
NOTIFY – UNRESTRICTED PAGE 3 OF 13Notify – Threat Intelligence
Public Issue #72, 04/2021
TABLE OF CONTENTS
1. Threat Intelligence ---------------------------------------------------------------------------------------- 5
1.1. Featured Advisories ------------------------------------------------------------------------------------- 5
1.2. Non-Conflict News and Events (P2) ------------------------------------------------------------------- 10
1.3. Conflict News and Events (P3) ------------------------------------------------------------------------- 10
1.4. Whitepapers, Publications & Regulations (P3) -------------------------------------------------------- 11
1.5. Counter-Drone Systems (P4) -------------------------------------------------------------------------- 11
1.6. Socials (P4) --------------------------------------------------------------------------------------------- 11
1.7. Informational (P5) -------------------------------------------------------------------------------------- 12
1.8. UTM Systems (P5) -------------------------------------------------------------------------------------- 12
1.9. Drone Technology (P5) -------------------------------------------------------------------------------- 12
NOTIFY – UNRESTRICTED PAGE 4 OF 13Notify – Threat Intelligence
Public Issue #72, 04/2021
1. THREAT INTELLIGENCE
1.1. FEATURED ADVISORIES
The prioritisation table and its dependencies are explained in Appendix A, and relate to how we filter,
analyse and visualise the intelligence we collect.
Intrusion and Trespass Priority
Belarusian border patrol capture drone smuggling cigarettes across Belarus-Polish border P2
Summary
The border patrol team located and detained a person using a drone to smuggle cigarettes across the
Belarusian-Polish border.
Overview
Several days earlier, the Belarusian Ministry of Defence reported that an aircraft had violated the border
between Belarus and Poland. However, it became known that the aircraft was noticed by the Belarusian border
patrol, and it was a drone flying from Belarus, with an attached package, into Polish territory. The drone flew
inwards Poland by about 400m. Although it was not stated if the drone was seized, the drone was found to be
smuggling 22,000USD worth of cigarettes. The smuggler was identified and detained as investigations
continue.
Analysis
There have been multiple reports in the past of smugglers using drones to smuggle goods across the border
in Belarus. The length of the Belarusian-Polish border is about 400km. This incident reflects the growing
adaptation of crime utilising drones to their advantage to carry out illicit operations. Organised crime groups
and individuals are realising that drones are an innovative solution against traditional methods of delivering
contraband across restricted areas.
Offenders for such acts tend to get away easily as most crime happen in public areas where drone detection or
counter-drone systems cannot be implemented effectively (cost and coverage wise) to mitigate the threat. The
skill barrier to be able to fly a drone is not complex. The offenders would just require communication with the
inmate and basic knowledge of border patrol routines to be able to commit the drop off with success.
Recommendation
It may be difficult to prevent take-off flights if the drone is coming from across the border; agencies on both
sides might need to focus on identify-mitigation strategies rather than prevention. In this case, they can learn
from the various tactics and techniques carried out previously by repeated incidents across the globe.
While some areas may have constraints in deploying counter drone solutions, basic preparation measures can
be set in place to respond to such incidents. For example, a drone threat management plan and Standard
Operating Procedure (SOP) should be drafted to govern the process, people, and methodology in handling a
drone threat. Counter-drone systems, even with just detection mechanisms, can aid security personnel in
responding to drone intrusion to prevent unwanted drop offs.
References
https://nn.by/?c=ar&i=271811
NOTIFY – UNRESTRICTED PAGE 5 OF 13Notify – Threat Intelligence
Public Issue #72, 04/2021
Safety Priority
Teen drone operator flies drone near rescue helicopter in Otago, New Zealand P2
Summary
A teenager flew a drone just metres away from a rescue helicopter near Dunedin Hospital's landing pad.
Overview
An Otago Regional Rescue Helicopter had just flown a patient and paramedics from Queenstown area to
Dunedin Hospital and was about to take off for a return flight when a paramedic spotted a drone flying about
20m southwest and 5m above the helicopter. The drone remained in the area for a while and the helicopter's
departure was delayed until the drone flew off. Local law enforcement managed to identify the operator, who
was a youth, when guests from the nearby Kingsgate Hotel saw a drone landing on a balcony of one of the
rooms and reported the incident. The matter would be referred to Youth Aid, but no charges would be laid.
Analysis
In New Zealand, some of the regulations for drone operations are to not fly within 4km of any aerodrome or
helipad, not fly in a special use airspace without the permission of the administering authority of the area, and
to take all practicable steps to minimize hazards to persons, properties, and other aircrafts, and to give way to
all manned aircrafts.
It is important that drone operators are cognisant of these aviation laws and the consequences of their actions
as a near miss or a direct hit could result in potential fatalities. Flight restrictions over populace are set in place
to prevent any possible drone-to-human or drone-to-manned aircraft collisions. Rules on drone operations
can be found online in the local government aviation websites and mobile applications at the convenience of
the operators. These drone laws and no-fly zones are set in place for safety reasons and for protection of
manned aircrafts, pilots, and civilians.
A study from the FAA concluded that drone strikes caused more damage to aircrafts and helicopters than bird
strikes due to their hard exterior and LiPo batteries, making drones a real threat to the safety of civil and
military aviation. Due to the rigid components of drones, these materials when ingested flew much deeper into
the engine and dealt a greater proportion of damage compared to animals.
Recommendation
Parents whose children have drones should ensure that their children are relevantly trained before operating a
drone by themselves. They should be kept updated with bulletins explaining any new rules or procedures as
they become available. These rules apply to all drone operators regardless of age and can be found online in
the local government aviation websites and mobile applications for the convenience of operators.
Likewise, organisations with drone operations should aim to keep themselves and their personnel up to date
and relevantly trained before operating a drone. It is the responsibility of drone operators to be sufficient
trained, certified, and updated with the latest regulations, procedures, and NOTAMs as soon as they become
available.
References
https://www.stuff.co.nz/national/crime/300284251/teen-drone-operator-nabbed-by-police-after-flying-near-
rescue-helicopter
NOTIFY – UNRESTRICTED PAGE 6 OF 13Notify – Threat Intelligence
Public Issue #72, 04/2021
Safety Priority
Drone crashes into windshield of a van in Germany P2
Summary
In Rhein-Erft-Kreis, Germany, a witness saw a drone fly straight into the windshield of a vehicle.
Overview
A drone damaged the windshield of a Mercedes Sprinter in the Kaster district, Germany. A witness observed
the remote-controlled drone at Von-Sparr street flew into the vehicle at high speed. The police found the
drone lying on the pavement right next to the damaged vehicle and secured it. They are currently asking for
witnesses who can provide information about the incident.
Analysis
While drone flying can be fun and taking aerial photographs and videos can be exciting, drone operators need
to have a good understanding on the performance of their drones during flight. Loss of line-of-sight, signal
interference, or loss of battery power are reasons why drones will become uncontrollable and crash
prematurely.
It is also important to note that data forensics can be performed on crashed drones. Drone operators who fly
erroneously risk being traced and identified from data forensics analysis on the telemetry, flight data, video
and photo footages from their crashed drones.
Recommendation
This incident highlights the importance of Remote Identification, which is a proactive approach to managing
incidents for unmanned drones. While Remote Identification is not widely implemented as of yet, due to
recent regulations from the US and UK, drone manufacturers may start to implement this system, enabling
better incident management in the future. This system will allow aviators and law enforcement agencies to (if
supported by CUAS activities) detect and prevent further navigation by drones which have infringed
regulations.
References
https://www.presseportal.de/blaulicht/pm/10374/4892827
Safety Priority
Near miss between plane and drone in Kelowna, Canada P2
Summary
The pilot of a small aircraft flying over Kelowna reported a near miss with a drone.
Overview
A Cessna aircraft from the Southern Interior Flight Centre was flying over Kelowna and reported a near miss
with a remotely piloted aircraft system, coming within 60m. The aircraft was 1km above sea level at the time.
Local law enforcement was notified of the incident.
Analysis
An increase in drone incursions have been happening globally, causing delays in emergency situations and
bringing a negative impact on the drone industry. Drone laws and no-fly zones are set in place for safety
reasons. It is important that drone owners are cognisant of these laws and the consequences of their actions
as a near miss or a direct collision by the drone could result in potential fatalities. Rules on drone operations
can be found online in the local government aviation websites and mobile applications at the convenience of
NOTIFY – UNRESTRICTED PAGE 7 OF 13Notify – Threat Intelligence
Public Issue #72, 04/2021
the operators. However, despite multiple public broadcasts, warnings and fines imposed on operators who
flout these rules, there are still many drone users who choose to fly drones into restricted areas due to
ignorance or plain disregard of aviation laws.
References
https://infotel.ca/newsitem/close-call-near-miss-between-small-plane-and-drone-over-downtown-
kelowna/it82501
Safety Priority
Drone reported flying 500ft below manned aircraft departing Nanaimo airport, Canada P2
Summary
A drone came dangerously close to a plane departing from Nanaimo airport in Canada.
Overview
The pilot of the aircraft reported that a drone was flying approximately 500 feet (150 m) below them as they
left Nanaimo airport for Vancouver. The plane was travelling at 2,500 feet (760 m) in altitude at the time with
the drone coming within the minimum vertical separation between aircraft. RCMP and Transport Canada are
currently investigating the incident.
References
https://nanaimonewsnow.com/2021/04/24/drone-flight-results-in-near-miss-for-plane-leaving-nanaimo-
airport/
Intrusion and Trespass Priority
Drone halts football match in Nottinghamshire, United Kingdom P2
Summary
A football match was halted when a drone was seen hovering over the stadium.
Overview
During Mansfield Town's League Two home game against Scunthorpe United, a drone was spotted by a
referee. The match was stopped for several minutes as a safety precaution. Local law enforcement then located
the operator on a nearby street and gave him a caution as well as confiscating the drone.
Analysis
As fans (in some countries) are not allowed to attend football matches due to COVID measures, DroneSec
have seen a rise in number of aerial incursions over stadiums where drones were flown in just to capture a
photo or video of an ongoing match.
Most drone operators do not have a full grasp of the consequences of their actions and such ignorance tend
to cause delays as drones are a safety risk to people on the ground. Measures have to be taken to ensure
populace are safe from any drone-human collision. Furthermore, many stadiums are worried of the risk of a
drone carrying a chemical, gas or explosive payload within the confined enclosure of a stadium; something
many hobbyist operators may not understand during their quest to gain video.
Major events and places of interest tend to have a flight restriction in place. Despite that, not all drone
operators visit the city's official aviation websites to view these notifications before launching their drones for
flight.
NOTIFY – UNRESTRICTED PAGE 8 OF 13Notify – Threat Intelligence
Public Issue #72, 04/2021
Recommendations
Currently, it is not possible to provide city-wide coverage of drone detection and counter-drone systems as
the cost for these systems are high. While some facilities may have constraints in deploying counter drone
solutions, basic preparation measure can be set in place to respond to such incidents. For example, a drone
threat management plan and Standard Operating Procedure (SOP) should be drafted to govern the process,
people and methodology in handling a drone incursion. The SOP should aid to hone responses and improve
communication flow during incidents and allow all participating personnel and agencies to respond effectively
during time critical scenarios and mitigate possible risks from drone threats.
References
https://www.bbc.com/news/uk-england-nottinghamshire-56839539
Intrusion and Trespass Priority
Mexican drug cartel CJNG dropped frag grenades from drones onto police, wounding two (UPDATE) P2
Summary
CJNG attack law enforcement with drones loaded with fragmentation grenades, leaving 2 policemen injured in
Aguililla.
Overview
Local media stated that two drones were used during the attack and it is believed that they were rigged in a
similar way to the two drones that were found in the car of suspected CJNG members a few months prior (see
previous report). These drones are thought to be the latest weapons in a deadly war between the drugs cartel
and the security forces and vigilantes opposed to them. The officers injured on Tuesday had been deployed to
clear roads leading to the city of Aguililla, which had been blocked by the cartel to impede the access of the
security forces.
Analysis
Using payload-capable drones is a cost-effective and risk-reduced technique without being spotted and allows
operators to distance themselves from the immediate blast radius. Drones allow malicious users to operate safely
with a low risk of being apprehended by law enforcement agencies due to being disconnected from the threat.
Operating the drone itself has a low skill barrier, however, in this situation, there is some operator experience
and domain knowledge required. For example, the syndicate had to build a printed circuit board assembly to
work in tandem with the drone on releasing the C4 explosives.
There is a rise in incidents in which drug cartels use explosive payloads by drones instead of just
reconnaissance or contraband drops. They have shown the ability to recreate the effect of a fragmentation
grenade using other materials such as ball bearings and plastic containers which increases the destructive
power of the explosive payload. Organised crime groups and individuals are realising that drones are an
innovative technology that allow them to carry out their criminal activities more effectively, whether it be to
deliver contraband across restricted areas or as weapons.
Recommendation
DroneSec recommends the Mexican authorities and municipalities local law enforcement agencies to be
prepared and ready for such threats. An increase in drone related surveillance and operations by criminal
gangs has been observed and DroneSec recommends these agencies to have basic preparation measures set
in place to respond to such incidents.
While it may not be possible yet to provide city-wide coverage of drone detection and counter-drone systems,
basic preparation measure can be set in place to respond to such incidents. A drone threat management plan
and Standard Operating Procedure (SOP) should be drafted to govern the process, people and methodology
in handling a drone threat.
Organisations should also aim to undertake mock simulations in reacting to such payload drone incidents to
NOTIFY – UNRESTRICTED PAGE 9 OF 13Notify – Threat Intelligence
Public Issue #72, 04/2021
hone their response, improve communication flow between emergency and rescue agencies and practice on
the logging and monitoring of repeated cases. This information can aid law enforcement agencies in practicing
and timing their response, mitigate risk and undergoing challenges faced in communication and regulatory
requirements.
In the event of an eyewitness, it is beneficial to have a process for, and then carefully collect evidence for
collection and logging. This data can help to determine if the drone was similar to previous cases which may
help provide the modus operandi of rogue groups and assist in the arrest of the operator.
References
https://www.elimparcial.com/mexico/CJNG-video-drones-cartel-jalisco-nueva-generacion-vaticano-coppola-
aguililla-narco-blog-ataques-explosivos-granadas-20210420-0076.html
https://www.breitbart.com/border/2021/04/25/exclusive-photos-cartels-in-mexico-weaponized-drones-to-
drop-ieds/
1.2. NON-CONFLICT NEWS AND EVENTS (P2)
Drones spotted hovering outside condominium raises concern for residents, Chicago
https://www.nbcchicago.com/news/local/drone-flying-near-south-loop-high-rise-raises-concerns-for-
residents/2495787/
Drone over college containing electronic voting machines downed by security personnel, India
https://timesofindia.indiatimes.com/city/trichy/camera-fitted-drone-flying-over-counting-centre-creates-
flutter/articleshow/82186494.cms
Thieves in California use drones to surveil rural properties before conducting burglaries
https://agalert.com/story/?id=14937
1.3. CONFLICT NEWS AND EVENTS (P3)
Two drones from Pakistan enter Indian territory, return after soldiers open fire at drones
https://www.hindustantimes.com/india-news/pak-drone-enters-indian-territory-in-jammu-flies-back-after-firing-
by-bsf-jawans-101619240399468.html
Footage shows Iranian drone spying on US warships in Persian Gulf
https://www.express.co.uk/news/world/1426268/World-War-3-fears-iran-drone-footage-aircraft-carrier-US-
warship-video-vn
Saudi-led coalition intercepts Houthi drone fired at southern Saudi Arabia
https://www.reuters.com/article/us-saudi-security-yemen/saudi-led-coalition-says-it-intercepts-houthi-drone-
fired-at-khamis-mushait-idUSKBN2C70TI
Yemen’s Houthis claim 3 drone attacks on Saudi Aramco and air base
https://www.reuters.com/world/middle-east/saudi-led-coalition-intercepted-houthi-explosives-laden-drone-
state-tv-2021-04-22/
NOTIFY – UNRESTRICTED PAGE 10 OF 13Notify – Threat Intelligence
Public Issue #72, 04/2021
1.4. WHITEPAPERS, PUBLICATIONS & REGULATIONS (P3)
Proposal to allow drones for natural disaster response earned approval from the Senate
https://floridapolitics.com/archives/422507-proposal-to-allow-drones-for-natural-disaster-response-soars-
through-senate/
Industry organisations show concern over avigation easements
https://dronelife.com/2021/04/26/avigation-is-not-a-typo-its-a-threat-to-drone-ops-say-two-industry-orgs/
The future of drone swarms in Russia (Commentary)
https://mwi.usma.edu/strength-in-numbers-russia-and-the-future-of-drone-swarms/
HESA drone crash offers insight into military ambitions (Commentary)
https://securitymiddleeast.com/iranian-defence-drone-crash-offers-insight-military-ambitions/
CENTCOM Commander on recent weaponization of small drones (Commentary)
https://www.hstoday.us/subject-matter-areas/airport-aviation-security/centcom-commander-drones-dropping-
explosives-probably-concerns-me-the-most/
1.5. COUNTER-DRONE SYSTEMS (P4)
Epirus develops microwave energy weapon that can disable a whole swarm of drones
https://www.epirusinc.com/news/insane-new-anti-drone-system-zaps-uavs-out-of-the-sky-with-targeted-
microwaves
DARPA developing Aerial Dragnet program, where larger drones are used for drone detection
https://www.c4isrnet.com/show-reporter/c4isrnet-conference/2021/04/22/darpas-plan-to-use-drones-to-find-
drones/
Malaysian National Task Force to test counter drone equipment in combined demonstration
https://www.unmannedairspace.info/counter-uas-systems-and-policies/malaysian-law-enforcement-officials-test-
counter-drone-equipment-in-combined-demonstration/
China unveils latest counter drone technology at radar expo, YLC-48 portable radar
https://www.globaltimes.cn/page/202104/1221903.shtml
1.6. SOCIALS (P4)
Russia showcases its Zala Lancet drones’ effectiveness against hostile UAVs
https://www.youtube.com/watch?v=vbi4-4JBNDk
Iran’s IRGC releases footage of its suicide drone
https://twitter.com/PressTV/status/1384915034544001033
Video on DJI Mini 2 LED hack allows drone carry and to release a payload via signals
https://hackaday.com/2021/04/20/led-hack-teaches-dji-mini-2-drone-new-tricks/
NOTIFY – UNRESTRICTED PAGE 11 OF 13Notify – Threat Intelligence
Public Issue #72, 04/2021
1.7. INFORMATIONAL (P5)
Law enforcement in Mille Lacs County to use drones for search and rescue
https://www.hometownsource.com/union_times/news/publicsafety/in-time-of-need-drone-is-a-watchful-eye-
over-mille-lacs/article_e2bb1496-a2b8-11eb-9a5b-53b0d61e7ecc.html
Clarksburg to use drones in assisting law enforcement
https://www.wboy.com/news/harrison/clarksburg-police-purchases-drone/
1.8. UTM SYSTEMS (P5)
AirServices Australia releases RFP for Flight Information Management System (FIMS)
https://engage.airservicesaustralia.com/fims-rfp
Skyports to collaborate with Kenya Airways to launch drone delivery service in Kenya
https://www.adsadvance.co.uk/skyports-and-kenya-airways-to-launch-drone-delivery-service-in-kenya.html
India MoCA grants permission to conduct feasibility study of vaccine delivery via drones
https://techobserver.in/2021/04/24/govt-exploring-drones-services-for-covid-19-vaccine-delivery/
Factors to consider when selecting a UAS fleet management solution (commentary)
https://www.unmannedsystemstechnology.com/2021/04/selecting-a-uas-fleet-management-solution/
1.9. DRONE TECHNOLOGY (P5)
Iran reveals drone swarm technology
https://www.israeldefense.co.il/en/node/49512
Researchers at Polytechnique Montreal develop headsets that let police control drone swarms
https://interestingengineering.com/new-headsets-let-police-control-drone-swarms
UAE using drone with facial recognition to track criminals
https://dronedj.com/2021/04/26/facial-recognition-drones-sharjah-police/
Exyn drones achieve level 4 autonomy, capable of free-flight exploration of complex spaces
https://www.suasnews.com/2021/04/exyn-drones-achieve-autonomy-level-4/
Autonomous precision landing solution for DJI Mavic drones developed
https://dronedj.com/2021/04/23/dji-mavic-drone-precision-landing/
Zala Aero reveals hybrid engine UAV with GPS-independent navigation system
https://www.janes.com/defence-news/news-detail/zala-aero-unveils-hybrid-engine-uav-and-gps-independent-
uas-navigation-system
NOTIFY – UNRESTRICTED PAGE 12 OF 13Notify – Threat Intelligence
Public Issue #72, 04/2021
For Appendix items please click this link.
NOTIFY – UNRESTRICTED PAGE 13 OF 13You can also read
