Possible Malware Attack Suspected in Delhi Airport ATC System Disruption

New Delhi, November 7: The major disruption that hit the Air Traffic Control (ATC) system at Indira Gandhi International Airport (IGI) on Friday may not have been a routine technical failure but the result of a malware-induced overload in the automation software, according to officials familiar with the ongoing probe.

Preliminary findings indicate that the automation software may have struggled to manage an abnormal data surge, possibly triggered by a malware intrusion attempt targeting system interfaces or radar synchronisation modules. “The system appeared to experience conflict handling issues linked to a potential malware overload. Investigators are examining whether this was a deliberate intrusion exploiting vulnerabilities in radar and automation modules,” a senior official said.

Sources further revealed that the affected systems lacked critical software updates and real-time backup capabilities, which worsened the outage’s impact. “This is still in the initial stages of investigation, but it appears that multiple ATC subsystems were affected simultaneously. The event resembles a data-flood or forced-loop scenario, commonly associated with malware-triggered system failures,” a cyber-forensics expert noted.

According to the Airports Authority of India (AAI), the glitch disrupted departure sequencing and forced controllers to switch to manual coordination, resulting in cascading delays across air corridors. Airlines including IndiGo and Air India confirmed that flight operations were significantly affected, urging passengers to monitor real-time updates for schedule changes.

Officials emphasised that the findings remain preliminary, and a comprehensive technical audit is underway. However, if confirmed as a cyber intrusion, this would represent one of the most serious cybersecurity incidents in Indian civil aviation, underscoring the vulnerabilities of legacy automation systems such as the Air Traffic Message Switching System (AMSS).

Experts have warned that outdated systems without robust patch management or redundancy mechanisms remain at risk of similar disruptions, highlighting the urgent need for modernisation and enhanced cybersecurity protocols within India’s aviation infrastructure.