Spanish airline Iberia attributes recent data breach claims to November incident

A cybersecurity firm revealed a data breach involving Iberia, where threat actor Zestix stole sensitive aviation and customer data using infostealer malware. The incident highlights ongoing risks from organized cybercriminal groups operating within Russian-language forums. #Zestix #Funksec #Iberia #InfostealerMalware

Keypoints

The breach involved the theft of 77 GB of data, including aircraft technical materials and maintenance files.
Zestix, a threat actor linked to Russian forums, is suspected of using infostealer malware to access organizations.
Iberia reported the incident to Spanish regulators and informed hundreds of customers about the breach.
The stolen data includes personal information and booking details of Iberia customers, with no threat to flight safety.
Security firms link Zestix to an Iranian national and associate the actor with the Funksec cybercriminal group.