According to Radio-Canada, the International Civil Aviation Organization (ICAO), which is part of the United Nations (UN), experienced the the “most serious cyberattack in its history” in November of 2016, but then kept quiet about it for months.
As a result of the severely flawed way in which the ICAO responded to the attack, malware that was planted on ICAO systems by what seems to have been a Chinese threat group, could spread throughout the aviation industry. In addition, the attackers were able to obtain accesses to 2,000 email accounts belonging to ICAO users.