The ransomware claim alleges that the threat actor Everest targeted Collins Aerospace, a division of Raytheon Technologies Corporation, with a sophisticated attack aimed at disrupting its aerospace and defense operations. The incident recently impacted the United States.#UnitedStates
Incident Details
- Victim: Collins Aerospace / RTX.com
- Country: US
- Actor: everest
- Source: http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/news/collinsaerospace
- Discovered: 2025-10-17 23:24:03.928476
- Published: 2025-10-17 23:23:42.798932
Information
- Ransomware attack targeted Collins Aerospace / RTX.com.
- The incident occurred in the United States.
- The threat actor responsible was Everest.
- Collins Aerospace is a division of Raytheon Technologies Corporation.
- The company specializes in advanced and intelligent solutions for the aerospace and defense industry.
- Collins Aerospace was established in 2018 through the merger of UTC Aerospace Systems and Rockwell Collins.

Disclaimer: This post is based on public claims made by the ransomware group "everest". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.