techjacksolutions.com • 7h
Quantum Systems QBase Supply Chain Compromise Grounds Bundeswehr Drone Fleet
A supply chain compromise of Quantum Systems' QBase update server enabled distribution of a trojanized software update to Bundeswehr-operated drones. Attackers abused the legitimate update channel, potentially bypassing or stealing code-signing certificates to push a malicious package containing backdoor or C2 beaconing functionality. The German military grounded its drone fleet to prevent loss of control, telemetry manipulation, or persistent adversary access. Remediation included forensic analysis of update artifacts, revocation of compromised signing material, and phased restoration after integrity verification.