Skip to content

KrasAvia Hit by Cyberattack: Website Defaced, Flights Disrupted

KrasAvia's website hacked, flights affected. Passengers urged to arrive early at airports.

This is airplane.
This is airplane.

KrasAvia Hit by Cyberattack: Website Defaced, Flights Disrupted

KrasAvia, a Krasnoyarsk-based airline, faced a significant setback on September 18 when its information systems failed, leading to a cyberattack that defaced its website with threatening imagery. The airline has warned passengers of potential disruptions across its network.

The cyberattack on KrasAvia resulted in its website becoming inaccessible, displaying a defaced page with logos of multiple Russian airlines, including United Airlines, Delta, Southwest Airlines, Delta Airlines, Frontier Airlines, Spirit Airlines, and American Airlines, overlaid with spider webs and a menacing message. Phone lines also failed to connect, suggesting a deliberate attempt to disrupt the airline's operations.

KrasAvia has advised passengers to monitor flight information directly from airport display boards and loudspeaker announcements, as online check-in remains unavailable. Flights are currently operating on schedule, but passengers are urged to arrive at the airport well in advance due to the ongoing issues.

The suspected perpetrator of the cyberattack is believed to be a group linked to the notorious REvil ransomware gang. While no group has yet claimed responsibility for the KrasAvia disruption, the defacement imagery referencing Aeroflot's high-profile hack in July 2025 suggests a possible connection.

KrasAvia continues to investigate the cyberattack and its impact on operations. Passengers are encouraged to stay informed and prepared for any further developments. The airline remains committed to ensuring the safety and security of its passengers.

Read also:

Latest