A satellite can keep transmitting while people below lose the service they depend on. The failure may lie in a radio link, in information accepted by a receiver, or in a network on the ground. Each can produce an outage without destroying anything in orbit.
The useful question is where the service has broken, and what evidence identifies the cause. A missing position, a convincing false position and a disconnected internet terminal tell different stories. None, by itself, names an attacker.
What is there to disrupt besides the satellite?#
A satellite service extends from spacecraft to equipment and people on Earth. GPS makes this especially clear: its official description separates the system into space, control and user segments. The satellites transmit one-way signals containing satellite position and time. Receivers use the transmitted information to calculate their own position and time. Ground control stations monitor the constellation and update navigation data and clocks.
That arrangement matters because the receiver performs the final calculation. An error on a navigation screen does not establish that the satellite transmitted an error. Reception, equipment and the way its output enters another system all sit between the spacecraft and the displayed result.
Satellite broadband has a different architecture and purpose from navigation. Its customers also depend on functioning terminals and ground networks. Calling both systems “satellite services” does not make their failure mechanisms interchangeable.
How do jamming and spoofing differ?#
Jamming interferes with reception. EASA describes it as intentional radio interference that prevents a navigation receiver from locking onto satellite signals. The result can be degraded navigation or no usable satellite solution.
Spoofing supplies counterfeit satellite signals that deceive a receiver into producing incorrect position or time. A display may continue to show a result. Continued output therefore does not establish that the underlying information is trustworthy. EASA has reported increased interference around conflict regions since February 2022. In aircraft, documented symptoms include discrepancies in navigation positions and spurious terrain warnings.
These are different ways of breaking the path from radio signal to useful information. Neither requires a damaged spacecraft. A receiver denied a usable signal and a receiver accepting deceptive input can both let the user down, but diagnosis must distinguish them. Nor should every poor reception event be called jamming: obstacles and equipment failures can also interrupt the path.
Can a cyberattack interrupt satellite service from the ground?#
The KA-SAT incident on 24 February 2022 demonstrates this distinction. In its incident report, Viasat described a cyberattack that interrupted part of its consumer satellite broadband service in Ukraine and elsewhere in Europe. Other customers continued to receive service.
Viasat reported that an intrusion into the ground-based management network led to destructive changes to data held in customer modems, leaving affected terminals unable to access the network. Its investigation found no evidence that the satellite itself had been impaired or compromised. That is an operator's forensic account, with the limits of an investigation reported at the time, rather than independent access to every affected system.
The consequence was an outage for users, even though it was unnecessary to interfere with the radio signal arriving from space. Viasat also reported no physical or electrical damage to the affected modem components. Some service restoration involved replacement terminals. An intact satellite was therefore compatible with substantial disruption and a recovery effort on Earth.
Sources: [3]
Does a bad position prove deliberate interference?#
No. The US Coast Guard's Navigation Center separates several kinds of GPS problem: faults in the transmitted signal, blockage, interference, equipment failures, integration problems and operator error. Hardware or software can fail locally. An interface between a receiver and its host system can introduce a discrepancy even when the satellite constellation is functioning.
The distinction also extends to maps. GPS.gov explains that a device can calculate its position correctly while faulty mapping software places a road, address or business incorrectly. A misleading map is not necessarily a misleading radio measurement. Reflected satellite signals, known as multipath, and blockage by buildings are further ordinary causes of poor positioning.
This makes a single screenshot weak evidence of a specific cause. A position jump is an observation; an explanation must account for how that observation arose. Several affected devices can strengthen evidence of a shared problem, but the investigator still needs to distinguish a common radio environment from shared software, infrastructure or data.
How is identifying a cause different from identifying an attacker?#
An outage establishes that something stopped working. Technical diagnosis asks which part failed and why. Attribution adds a separate claim about responsibility.
KA-SAT supplies a concrete example. Viasat's March 2022 report described the affected systems and its forensic findings. A UK government statement on 10 May 2022 separately reported the National Cyber Security Centre's assessment that Russia was almost certainly responsible. The government assessment should be identified as such; it is not a conclusion that a customer could draw merely from a disconnected modem.
The same separation applies to navigation. EASA's interference monitoring uses patterns in aircraft navigation-quality reports and position anomalies, alongside occurrence reports. Those indicators help assess disruption. They are not, on their own, identification of a transmitter or proof of who controls it. A map of suspected interference is evidence about service conditions, with limits on what it can say about intent and responsibility.
Image unavailable.
Three stages separate an observed symptom, a diagnosis of its cause and attribution of responsibility.
What does useful resilience actually mean?#
Resilience depends on knowing which information sources remain trustworthy. EASA recommends non-GNSS navigation checks, coordination with air traffic control and aircraft-specific manufacturer guidance. It also warns that spoofing can affect positions produced by systems combining inertial navigation with satellite input.
That caveat explains why a second screen is not automatically an independent check. Two displays can inherit the same incorrect input. Independence concerns the origin and processing of information, rather than the number of instruments showing it. The right response depends on the aircraft and its approved procedures.
The wider engineering lesson is to examine shared dependencies. A backup that relies on the failed input cannot provide the same assurance as an independent source. For a ground-network incident, recovery must address affected infrastructure and terminals; changing the navigation source would answer a different problem.
How is physical destruction different?#
Physical damage changes the spacecraft's hardware. ESA distinguishes impacts that damage a subsystem, disable a spacecraft or break it apart. A destructive collision can also generate orbiting debris that threatens other spacecraft. Radio interference at a receiver does not itself create that debris cloud.
ESA's historical example is China's 2007 interception of Fengyun-1C, which generated thousands of trackable fragments. The Solwind interception offers another history of a satellite physically struck in orbit. These events belong to a different category from losing access to an otherwise functioning satellite's signal.
The boundary is the location and nature of the damage. Service can fail without orbital destruction, while destruction can leave consequences far beyond the original service.
Sources: [7]
Keep exploring
Sources & further reading
Follow the original research, records, and explanations behind this story.
- GPS GPS.gov
Space, control and user segments; one-way signals and receiver calculations.
- Global Navigation Satellite System (GNSS) Outages and Alterations European Union Aviation Safety Agency
Jamming/spoofing definitions, navigation effects, monitoring limits and general mitigation principles; checked 30 October 2026.
- KA-SAT Network cyber attack overview Viasat
Operator forensic account dated 30 March 2022; ground network and terminal disruption, with no evidence of satellite compromise.
- GPS Accuracy GPS.gov
Expanded FAQ on wrong positions: blockage, reflections and faulty mapping.
- Russia behind cyber-attack with Europe-wide impact an hour before Ukraine invasion UK Foreign, Commonwealth & Development Office
10 May 2022 statement of the NCSC attribution assessment; not used as technical evidence for irreparable modem damage.
- Space Debris FAQ: Frequently asked questions European Space Agency
Q5 and Q9: Fengyun-1C breakup and physical damage/debris distinctions. Stale current population and future mission figures omitted.
Follow the thread