International airport in Europe

The organisation operates as an international airport located in Europe. It provides air transport services for both passengers and cargo. The airport facilitates passenger processing, including check‑in, security screening and boarding procedures. It also manages flight logistics such as gate assignments, baggage handling and coordination with air traffic control. As an international hub, it accommodates flights from numerous domestic and international carriers. The airport serves a diverse traveller base, supporting tourism, business travel and trade movements. Its infrastructure includes runways, taxiways, terminals and ancillary support facilities. The organisation is subject to aviation safety and security regulations applicable to European airports. Operational continuity is essential to maintain scheduled services and minimise delays. The airport’s role extends to supporting regional economic activity through connectivity.

On 16 October 2019 the airport experienced a widespread infection of cryptocurrency mining malware. The majority of its workstations were compromised by a variant specifically designed to evade traditional antivirus defenses. The malware was not detected by signature‑based tools but was identified through behavioral analysis of abnormal system performance and high processing loads. Cyberbit’s Endpoint Detection and Response technology flagged the unauthorized operations that had been missed by conventional security products. The infection raised concerns about potential operational disruptions, including system slowdowns or failures. Such disruptions could have impacted passenger processing functions and flight logistics operations. The incident highlighted how critical infrastructure can be targeted for illicit mining of computational resources. It underscored vulnerabilities in the airport’s IT environment to stealthy, resource‑exploiting attacks. The case demonstrated the importance of behavioral‑based detection methods for identifying sophisticated threats. Following the discovery, remediation efforts would have been necessary to restore normal system integrity and security posture.