Issue 75

Hack-a-Sat Goes to Space: Moonlighter Launched

5 Jun 2023: A SpaceX Falcon 9 carried Moonlighter, a new 3U cubesat, among other spacecraft to LEO as part of an ISS re-supply mission. Moonlighter will be part of Hack-A-Sat 4, an annual space security challenge timed with DEF CON that's hosted jointly by the US Air Force and Space Force. This is the first year that…

5 Jun 2023: A SpaceX Falcon 9 carried Moonlighter, a new 3U cubesat, among other spacecraft to LEO as part of an ISS re-supply mission. Moonlighter will be part of Hack-A-Sat 4, an annual space security challenge timed with DEF CON that’s hosted jointly by the US Air Force and Space Force. This is the first year that finalists can target a real satellite in orbit rather than a simulation. Watch Moonlighter Overview Video. SpaceX Launch Video.

Moonlighter will be used as an experimental “hacking sandbox.” Security researchers will use that sandbox as part of a competition taking place at the annual DEF CON hacking conference in Las Vegas later this year. Teams will attempt to infiltrate it all in the service of identifying vulnerabilities in satellites to improve cybersecurity in space.

Moonlighter is a 3U CubeSat with stowed outer dimensions of 34x11x11cm and flight configuration outer dimensions of 50x34x11cm. Deployable solar panels extend off the long axis of the spacecraft and each deployed array has dimensions 34×20 cm.

– Its mission orbit will be circular between 465km and 500 km altitude and it will be inclined 51.6°.

-Moonlighter is meant to bolster operational security of space objects (as opposed to the data they transmit). It has a dedicated cyber payload with a firewall to isolate the onboard subsystem, along with a “fully reprogrammable payload computer that behaves like a flight computer, according to an announcement (PDF) from Aerospace Corp.

-A working satellite designed to help improve cybersecurity for space systems by providing a real-time, real-world target for pen testers is an important step forward, given that satellite hacks are hardly theoretical. Early in 2022, the FBI and CISA warned that attacks against satellite ground-based and space-based infrastructure could become a reality. Soon after, in the wake of Russia’s invasion of Ukraine, nation-state cyber operations targeted communications in the region via Viasat and SpaceX’s Starlink satellites.

Rendering of the Moonlighter 3U CubeSat.

Moonlighter mission and spacecraft overview.