NOTIFY ISSUE #117 (PUBLIC) - WEEKLY THREAT INTELLIGENCE - Webflow
←
→
Page content transcription
If your browser does not render page correctly, please read the page content below
NOTIFY ISSUE #117 (PUBLIC) WEEKLY THREAT INTELLIGENCE 10 Mar 2022 | v1.0 RELEASE
Notify – Threat Intelligence
Public Issue #117, 03/2022
DOCUMENT CONTROL
PREPARATION
DroneSec (dronesec.com)
Threat Intelligence Team
Email: info@dronesec.com
This document is a summary of real-time incidents released within the Notify UAS Threat Intelligence
Platform. If you have been forwarded this document, subscribe for future updates: here.
PROPRIETARY – UNRESTRICTED PAGE 2 OF 17
Notify – Threat Intelligence
Public Issue #117, 03/2022
TABLE OF CONTENTS
1. Threat Intelligence ---------------------------------------------------------------------------------------- 4
1.1. Featured Advisories ------------------------------------------------------------------------------------- 4
1.2. Non-Conflict News and Events (P3) -------------------------------------------------------------------- 8
1.3. Conflict News and Events (P3) -------------------------------------------------------------------------- 9
1.4. Cyber and Data Security (P4) -------------------------------------------------------------------------- 11
1.5. Socials (P4) --------------------------------------------------------------------------------------------- 11
1.6. Whitepapers, Publications & Regulations (P4) -------------------------------------------------------- 14
1.7. UTM Systems (P4) -------------------------------------------------------------------------------------- 15
1.8. Informational (P5) -------------------------------------------------------------------------------------- 15
1.9. Drone Technology (P5) -------------------------------------------------------------------------------- 15
PROPRIETARY – UNRESTRICTED PAGE 3 OF 17
Notify – Threat Intelligence
Public Issue #117, 03/2022
1. THREAT INTELLIGENCE
1.1. FEATURED ADVISORIES
The prioritisation table and how we filter, analyse and visualise the intelligence we collect is located at
the end of the document.
Intrusion and Trespass Priority
Black Stork gang unveils JMRRC X1380S Agricultural UAV Drone used for strikes in Belarus, Ukraine P2
Summary
An image of an agricultural drone was released in a Telegram chat with the text "Black Stork in Kyiv. Getting
ready for work. Everything that can cause damage to the invaders will be dropped on their heads." The drone
was partially identified to be JMRRC X1380S drone which could have been used in past incidents where
incendiary mixtures were dropped onto law enforcement facilities, causing structural damage.
Figure 1: The Drone unveiled for usage by the Black Stork gang
Analysis
The drone highly resembles the JMRRC X1380S Agricultural UAV, or the JMRRC X1400 Quad Patrol UAV Fire
Fighting Drone. It has a 10kg payload capacity, usually for farming, in this case, removed for inserting the
payload. Black Stork loves to use incendiary payloads, which will be the most likely use-case. The reason we
matched it to this model is:
1. The cover/lid has identical line patterns, as confirmed with image forensics underneath the paper.
2. The legs/stand, the arm joints and thickness, and overall length makes it somewhat likely it is indeed the
JMRRC X1380S 10kg system - around $920 USD for the base frame.
Reference(s)
https://t.me/busly_laciac/792
PROPRIETARY – UNRESTRICTED PAGE 4 OF 17
Notify – Threat Intelligence
Public Issue #117, 03/2022
Intrusion and Trespass Priority
Pakistani DJI Matrice 300 with contraband seized in Ferozepur, India P2
Summary
Indian Border Security Forces heard drone sounds early morning along the Indian-Pakistani border at Ferozepur
and fired illumination bombs in the sky to spot the drone. The drone was sighted and soldiers opened fire at a
drone in attempt to bring it down. The drone was eventually shot down and seized revealing 4.17kg of
contraband in four yellow packages and one black package. The drone was a DJI Matrice 300 RTK.
Figure 2: DJI Matrice 300 and the contraband it was carrying seized by Indian BSF
Analysis
Although the specification sheet from DJI states that the DJI Matrice 300 (M300) RTK has a maximum payload
weight of 2.7kg, it has a take-off weight capacity of 9kg. Carrying the 4.2kg payload however, would influence
the flight performance, stability and reduce its operating range and battery. The M300 is a heavy-duty drone
and a fairly new model which was recently released by DJI, so heavier payloads would not affect system
performance as much as its hobbyist drone counterparts. It is able to sustain flights up to an hour, which would
have been more than sufficient time for the drone operator to deliver the contraband and fly back. For the drone
operator or group to utilise this drone for narcotics delivery signifies a somewhat substantial amount of funding.
Reference
https://www.indiatoday.in/india/story/border-security-force-shoots-down-drone-punjab-ferozepur-1921556-
2022-03-07
PROPRIETARY – UNRESTRICTED PAGE 5 OF 17
Notify – Threat Intelligence
Public Issue #117, 03/2022
Intrusion and Trespass Priority
Drone drops carton of yogurt drink containing contraband into PI Alphen prison, Netherlands P2
Summary
Prison guards at the PI Alphen were alerted to a drone sighting in the area and were surprised to find the drone
dropping a carton of a yogurt drink. Upon opening the drink, mobile phones, chargers, SIM cards and cables
were found within, tightly wrapped in gladwrap to protect against liquid contact. The contraband was seized
and confiscated; however, the drone and its operator were not found.
Figure 3: Contraband found within the drink carton seized by prison guards
Analysis
Although there is nothing unique about this drone incident, this is an interesting incident whereby the smuggler,
hoping to evade detection, attempted to fool prison guards by hiding contraband within a common household
food item. Small time criminals are beginning to adopt the use of drones to deliver contraband into restricted
areas as this method proves to be effective, reduced in risk of the operator being detected and apprehended,
and the drone is cheap and easy to purchase.
Threat Actor Profile
Prison Drone Delivery Groups: https://help.dronesec.com/en/articles/4637701-prison-drone-delivery-groups
Reference
https://www.dutchnews.nl/news/2022/03/drone-drops-yogurt-drink-contraband-at-prison/
https://www.instagram.com/p/CarXqKTMfs-/
PROPRIETARY – UNRESTRICTED PAGE 6 OF 17
Notify – Threat Intelligence
Public Issue #117, 03/2022
Figure 4: Can't see this? Contact us to sign up for Notify PRIVATE
PROPRIETARY – UNRESTRICTED PAGE 7 OF 17
Notify – Threat Intelligence
Public Issue #117, 03/2022
1.2. NON-CONFLICT NEWS AND EVENTS (P3)
Man arrested for attempting to deliver narcotics and hacksaw blades into Lieber prison, USA
https://wpde.com/news/local/sc-man-arrested-for-dropping-550-grams-of-pot-four-hacksaw-blades-into-jail
Two men charged for attempting to deliver narcotics into Port of Spain Prison using a drone
https://tt.loopnews.com/content/two-charged-allegedly-attempting-traffic-contraband-using-drone
South Korean military drone crashes into water tank, causes minor fire, Busan
https://www.stripes.com/branches/army/2022-03-04/south-korea-military-drone-crash-us-army-outpost-busan-
5221336.html
Drone was sighted in the vicinity of Beaver Creek Institution, Canada
https://avrodex.com/view/2022O0302
Manned pilot spots drone at 1000ft in the vicinity of Vancouver Airport just before take-off
https://avrodex.com/view/2022P0194
Two packages of contraband found at Collins Bay Institution from drone drop, Canada
https://www.kingstonist.com/news/csc-seize-contraband-after-suspected-drone-drop-at-collins-bay-institution/
Uzbekistani citizen arrested for illegally buying and flying unlicensed DJI Mavic 2 Pro
https://t.me/fototexnika1/118352
Woman snaps photo of drone hovering outside of residential unit in Lakeland, Florida, USA
Figure 5: Snapshot of drone hovering just right outside of a residential unit
https://www.fox13news.com/news/lakeland-woman-calls-police-after-drone-hovers-outside-her-apartment
Residents report sightings of drones hovering outside of window, Glenfield, UK
https://www.leicestermercury.co.uk/news/local-news/drones-hovering-near-windows-spark-6743808
PROPRIETARY – UNRESTRICTED PAGE 8 OF 17
Notify – Threat Intelligence
Public Issue #117, 03/2022
1.3. CONFLICT NEWS AND EVENTS (P3)
DJI Phantom 4 from Myanmar’s NUG Air Force shot down near Kyun Taw village
Figure 6: DJI Phantom 4 shot down and seized in Myanmar
https://t.me/banyunt969/16122
Russian Orlan-10 drone reported shot down in Odesa, Ukraine
https://t.me/armygrup/493193
Ukrainian soldiers fire at alleged Russian COTS drone as civilians evacuate Irpin, Ukraine
Figure 7: Ukrainian soldiers shooting at a COTS drone hovering above
https://t.me/ukrainerussiastatus/52902
PROPRIETARY – UNRESTRICTED PAGE 9 OF 17
Notify – Threat Intelligence
Public Issue #117, 03/2022
Ukrainian Athlon Avia A1-CM Furia surveillance drone found in Nizhyn, Ukraine
Figure 8: Athlon Avia A1-CM Furia surveillance drone found
https://twitter.com/Blue_Sauron/status/1500791039287861249
Yemeni Forces report shooting down Saudi’s ScanEagle over Hajjah
Figure 9: Remnants of ScanEagle found being being shot down
https://www.tasnimnews.com/en/news/2022/03/08/2678965/yemeni-forces-shoot-down-us-made-spy-drone-
over-hajjah
Israel unclassifies report of shooting down Iranian drone ferrying arms to Gaza in March 2021
https://www.timesofisrael.com/idf-says-f-35-jets-intercepted-iranian-drones-destined-for-gaza-last-year/
PROPRIETARY – UNRESTRICTED PAGE 10 OF 17Notify – Threat Intelligence
Public Issue #117, 03/2022
Indian border security forces report Pakistani drone sighting at Ganganagar sector of Rajasthan
https://timesofindia.indiatimes.com/city/jaipur/rajasthan-bsf-foils-pakistans-drones-infiltration-attempt-in-
ganganagar/articleshow/90009321.cms
Ukrainian Leleka-100 UAV seized by Russian forces in Ukraine
Figure 10: Ukrainian Leleka-100 surveillance drone seized by Russian forces
https://twitter.com/Blue_Sauron/status/1500884881144004608
1.4. CYBER AND DATA SECURITY (P4)
No Limit Dronez modification makes licenses free to Russians, Ukrainians in the conflict
https://nolimitdronez.com/free-no-limit-dronez-license
Guide on making drones conflict ready with anti-forensics
https://mobile.twitter.com/konrad_it/status/1497335133917044743
DJI No-Fly-Zone (NFZ) online tracking script for Ukraine
https://github.com/KonradIT/dji-nfz-tracker
1.5. SOCIALS (P4)
DJI drone footage of burning Epicenter K mall in Chernihiv, Ukraine (Update)
https://twitter.com/faineg/status/1498724385363951621
Drone videos roadblocks in Enerhodar for preventing entry from Russian forces, Ukraine
https://www.instagram.com/p/CanE1WsPWjn/
Drone videos firefight of Russian and Ukrainian forces at Antonovsky bridge Kherson, Ukraine
https://t.me/oltiariq_tv_oltiariqliklar/9971
Drone flies above firefight, military units and vehicles in Bucha, Ukraine
https://twitter.com/markito0171/status/1499838283202899969
PROPRIETARY – UNRESTRICTED PAGE 11 OF 17Notify – Threat Intelligence
Public Issue #117, 03/2022
Russian soldiers with potential DJI Mavic 2 drone controller, Volnovakha, Ukraine
Figure 11: DJI drone controller used by Russian soldiers
• The controller and joysticks have a similar shape to that of the Mavic 2 controller
• The logo placement is covered by the tablet extension arm clip holder
• The palm winglets and antenna shape are similar to that of the Mavic 2 controller
• The tablet USB connection wire inserts into the same base port as the Mavic 2
https://twitter.com/RALee85/status/1499794198328922114
https://t.me/milinfolive/77914
Drone captures alleged Ukrainian civilians in Melitopol receiving humanitarian aid
https://mobile.twitter.com/SDyorin/status/1499950723315814404
Azov Regiment publishes drone video of Russian troops, vehicles in Mariupol, Ukraine
https://twitter.com/RALee85/status/1501243288241770502
Ukrainian Ground Forces release footage of destroyed Russian vehicles, Sumy, Ukraine
https://twitter.com/ABC/status/1501357356021604354
Drone footage captures MRLS shelling against Ukrainian forces in Peremoha, Ukraine
https://mobile.twitter.com/BackAndAlive/status/1500447665024348168
Ukrainian SoF operative with DJI AeroScope mobile C-UAS, Kiev, Ukraine
https://twitter.com/CalibreObscura/status/1498756535551471625
DJI Mavic 2 Enterprise Advanced thermal optics footage of battlefield, Makariv, Ukraine
https://mobile.twitter.com/UAWeapons/status/1500850987594129413
Drone footage of Russian armour hit, Ukraine
https://twitter.com/Blue_Sauron/status/1501459371791892481
Drone footage of Ukrainian ambush against Russian military vehicles
https://twitter.com/UAWeapons/status/1500912984302010374
Ukrainian woman downed looters drone with a jar of tomatoes
https://life.liga.net/istoriyi/article/eto-byli-pomidory-ligalife-nashla-kievlyanku-sbivshuyu-vrajeskiy-dron-bankoy-
konservatsii
PROPRIETARY – UNRESTRICTED PAGE 12 OF 17Notify – Threat Intelligence
Public Issue #117, 03/2022
Drone videos destruction of residential building due to conflict, Ukraine
https://t.me/novostnoy_portal/654
DPR soldiers allege teddy bears with grenades dropped from Ukrainian drone
Figure 12: Teddy bear soft toy with grenade within supposedly dropped by Ukrainian drones
https://t.me/WarTime13/2191
Russian E95M drone reported to have been used to test Ukrainian Air Defence systems
Figure 13: Russian made E95M drone
https://twitter.com/AuroraIntel/status/1499074901415706624
PROPRIETARY – UNRESTRICTED PAGE 13 OF 17Notify – Threat Intelligence
Public Issue #117, 03/2022
Russian MoD releases footage of Inokhodets-RU combat drone striking Ukraine
https://www.instagram.com/p/CarhlKmrrj8/
Russia releases drone video of captured Ukrainian asset from Kherson military base
https://www.instagram.com/p/Cauog5bJbXB/
BBC Russia releases drone video of evacuation process in Irpin, Ukraine
https://t.me/bbcrussian/24233
Georgian civilian flies drone in city center with Ukrainian flag in protest, Georgia
https://www.tiktok.com/@giodannell/video/7070451637822819585
Polish drone pilot uses drone to illuminate Belarusian embassy in Poland with Ukrainian flag
https://mobile.twitter.com/sadek/status/1498403552968032259
1.6. WHITEPAPERS, PUBLICATIONS & REGULATIONS (P4)
Four men indicted for attempting to smuggle a US counter drone system to Iran
https://www.justice.gov/opa/pr/indictment-and-guilty-plea-entered-iranian-export-case
140 DJI Mini drones to be hand-delivered to the military in Ukraine by Finnish trio (Commentary)
Figure 14: DJI Minis ready to be delivered to Ukraine
https://dronexl.co/2022/03/02/140-dji-mini-drones-ukraine/
Risks and Rewards of using COTS drones in the Ukraine-Russia conflict (Commentary)
https://www.linkedin.com/pulse/risks-rewards-using-cots-drones-ukraine-russia-conflict-mike-monnik/
PROPRIETARY – UNRESTRICTED PAGE 14 OF 17Notify – Threat Intelligence
Public Issue #117, 03/2022
Ukrainian drone enthusiasts help detect Russian forces (Video Commentary)
https://breakingone.com/news/ukrainian-drone-enthusiasts-detect-russian-forces/video_7ad7ef0f-35a0-5e7e-
9251-564a113b6393.html
Ukraine's army using a small stealth drone, The Punisher, against Russian forces (Commentary)
https://www.businessinsider.com/ukraines-punisher-drones-hit-russian-troops-multiple-times-reports-2022-3
Ukrainian drone enthusiast sign up to repel Russian forces (Commentary)
https://apnews.com/article/russia-ukraine-kyiv-technology-business-europe-
47dfea7579cedfe65a70296eb0188212
1.7. UTM SYSTEMS (P4)
Skyroads publishes whitepaper on urban UTM and navigation technology
https://www.urbanairmobilitynews.com/utm/skyroads-publishes-white-paper-on-urban-utm-and-navigation-
technology/
Kenya Airways to launch trials for eVTOL flying taxi in 2025
https://www.urbanairmobilitynews.com/air-taxis/kenya-airways-to-launch-flying-taxi-trials-in-2025/
1.8. INFORMATIONAL (P5)
Drone with thermal imaging helps Police find two criminals hiding in thick marsh
https://www.wbay.com/2022/03/06/fond-du-lac-county-deputies-arrest-2-green-bay-men-hiding-marsh-using-
thermal-drone/
Indonesian Air Force announce the formation of UAV Unit
https://en.tempo.co/read/1567165/indonesian-air-force-has-formed-uav-unit-says-chief-of-staff
US Nuclear Radiation surveillance drone to send its DroneRAD from Poland to Ukraine
https://www.globenewswire.com/news-release/2022/03/07/2397994/0/en/US-Nuclear-Radiation-Surveillance-
Drone-Will-Be-On-Its-Way-to-Ukraine.html
During the first week of fighting, Ukraine spent more than UAH 150 million on drones
https://twitter.com/BackAndAlive/status/1500556640260657155
1.9. DRONE TECHNOLOGY (P5)
CubePilot releases open-source ArduPilot-based drone platform, Ardubee
https://www.unmannedsystemstechnology.com/2022/03/ardupilot-based-miniature-open-source-drone-
platform-unveiled/
PROPRIETARY – UNRESTRICTED PAGE 15 OF 17Notify – Threat Intelligence
Public Issue #117, 03/2022
Researchers at Virginia Tech designs drone with capabilities to morph and maintain shapes
https://www.wevolver.com/article/new-soft-robotic-drone-from-a-shape-and-rigidity-morphing-mechanical-
metamaterial
Iran unveils new suicide drone, Meraj 504, capable of carrying 2.5kg explosives over 100km
Figure 15: Iranian Meraj-504 suicide drone revealed in Iran's underground base
https://www.islamtimes.org/en/news/982520/irgc-unveils-new-meraj-504-kamikaze-drone-to-attack-enemy-s-
defense-systems
PROPRIETARY – UNRESTRICTED PAGE 16 OF 17Notify – Threat Intelligence
Public Issue #117, 03/2022
For Appendix items please click this link.
PROPRIETARY – UNRESTRICTED PAGE 17 OF 17You can also read
