Cyber Espionage Group Targets Aviation Firms to Steal Map Data

A cyber espionage group called HeartlessSoul is targeting aerospace firms and drone operators through sophisticated phishing campaigns designed to steal geospatial mapping data, GPS coordinates, and terrain models. The attackers use fake aviation software installers to compromise systems and exfiltrate GIS files, primarily from Russian organizations, giving adversaries insight into infrastructure, strategic assets, and even how victims view their own intelligence landscape. Cybersecurity experts say the campaign shows nation-state level sophistication and recommend organizations protect critical GIS data with zero-trust security measures and network segmentation.