CTF in space: a hackable satellite is about to launch

A satellite named Moonlighter, serving as a “hacking test bed,” will be launched by SpaceX in a delayed mission. The initiative, led by the International Space Station (ISS) National Laboratory, aims to identify vulnerabilities in satellite systems and develop countermeasures against potential hacks. Moonlighter, a three-unit sandbox satellite, will provide a platform for cybersecurity professionals and hackers to conduct secure and realistic space-based cyber experiments. The project intends to address the lack of dedicated vehicles for cybersecurity testing in orbit. The February 2022 compromise of Viasat highlighted the disruptive potential of attacks on space communications, although Moonlighter is not aimed at attacking satellites. By offering a playground-like environment, the sandbox facilitates cyber exercises and the testing of new technologies, ultimately leading to more resilient architectures for future space missions. Moonlighter is associated with the annual Hack-A-Sat 4 challenge, and during the August DEF CON convention, finalists will have the opportunity to hack the CubeSat while it is in orbit. The initiative receives support from the US Air Force, US Space Force, and Aerospace. Alongside Moonlighter, SpaceX’s 28th commercial resupply services mission will also carry six other cubesats, developed as part of Canada’s CubeSat project by student teams.