Cyberattacks like GPS spoofing threaten oil supertankers and cargo ships at sea. Photo by Ian Simmonds, Unsplash
Subscribe for Updates!
Join our mailing list to receive the latest news and updates from our team.
You have Successfully Subscribed!
The oceans may seem vast and empty, but GPS signals guide modern ships travel through crowded and contested space. When those signals are manipulated, the consequences do not stay confined to military systems.
The war in Iran has dominated headlines with reports of airstrikes and escalating military activity. But beyond the immediate devastation, the conflict has also illuminated a quieter and rapidly growing danger: the vulnerability of ships, and the people who operate them, to disruption of their navigation systems.
Modern shipping depends heavily on GPS satellite navigation. When those signals are disrupted or manipulated, ships can suddenly appear to their navigators and to other ships to be somewhere they are not. In some cases, vessels have been shown jumping across maps, drifting miles inland or appearing to circle in impossible patterns. The risk is even higher in war zones, where ships could be misdirected into harm’s way.
As a cybersecurity researcher studying critical infrastructure and maritime systems, I investigate how digital threats affect ships and the people who operate them.
To understand the threat from GPS disruptions, it helps to first understand how GPS works. GPS systems determine location using signals from satellites orbiting Earth. A receiver calculates its position by measuring how long those signals take to arrive. Because those signals are extremely weak by the time they reach Earth, they are relatively easy to disrupt.
GPS Jamming and Spoofing
In GPS jamming, an attacker blocks the real satellite signals by overwhelming them with electromagnetic noise so receivers cannot detect them. When this happens, navigation systems lose their position. On a phone, it might look like the map freezing or jumping erratically.
GPS spoofing is more sophisticated. Instead of blocking signals, an attacker transmits fake satellite signals designed to mimic the real ones. The receiver accepts these signals and gives a false location. Imagine driving north while your navigation system suddenly insists you are traveling south. The receiver is not malfunctioning; it has simply been tricked.
Circular loops in the Black Sea show spoofed ship positions recorded in January 2025. The red points represent false GPS locations broadcast during spoofing events, making vessels appear to move in perfect circles on tracking maps even though they were actually hundreds of miles away. These disruptions are widely believed to be linked to electronic interference in the region during the war in Ukraine. Image created with data from Spire Global. Anne Raymaker
For mariners at sea, spoofing can have serious consequences. In the open ocean, there are few landmarks to verify a ship’s position if GPS behaves strangely. Nearshore, the margin for error disappears: Water depths change quickly and hazards are everywhere, especially in narrow routes like the Strait of Hormuz near Iran, where reports indicate that GPS spoofing has been happening since the outbreak of the war. Because ships are large and slow to maneuver, even small navigation errors can lead to groundings or collisions.
Red Sea Grounding
One example came in May 2025. While transiting the Red Sea, the container ship MSC Antonia began showing positions far from its true location. To navigators onboard, this looked like they had jumped hundreds of miles south on the map and started moving in a new direction. This caused the crew to become disoriented, and the ship eventually ran aground. The grounding caused millions of dollars in damage and required a salvage operation that lasted over five weeks.
MSC Antonia route comparison showing the vessel’s true route and grounding point, left, versus the spoofed route, right. The red and black lines on the right show the spoofed locations where the ship appeared to suddenly jump to on GPS. These lines confused the navigators and caused them to run aground. Images created with data from VT Explorer. Anne Raymaker
Incidents like the MSC Antonia are not isolated. Vessel-tracking data has revealed clusters of ships suddenly appearing in impossible locations, sometimes far inland or moving in perfect circles. These anomalies are increasingly linked to GPS spoofing in regions experiencing geopolitical conflict.
But GPS interference is only one type of cyber threat facing ships. Industry reports have documented ransomware attacks on shipping companies, supply chain compromises and increasing concern about the security of onboard control systems, including engines, propulsion and navigation equipment. As ships become more connected through satellite internet systems and remote monitoring tools, the number of potential entry points for cyberattacks is growing.
Military vessels often address these risks through stricter network segregation and regular training exercises such as “mission control” drills, which simulate operating with compromised communications or navigation systems. Some cybersecurity experts argue that similar practices could help commercial shipping improve its resilience, although smaller crews and limited resources make adopting military-style procedures more difficult.
Mariners’ Experiences
Much of the public discussion around maritime cybersecurity focuses on technical vulnerabilities in ship systems. But an equally important piece of the puzzle is the people who must interpret and respond to these technologies when something goes wrong.
In recent research, my colleagues and I interviewed professional mariners about their experiences with cyber incidents and their preparedness to respond to them. The interviews included navigation officers, engineers and other crew members responsible for ship systems. What emerged was a consistent picture: Cyber threats are increasingly occurring at sea, but crews are not well prepared to deal with them.
Many mariners told us that their cybersecurity training focused almost entirely on email phishing and USB drives. That kind of training may make sense in an office, but it does little to prepare crews for cyber incidents on a ship, where navigation and control systems can be the primary targets. As a result, many mariners lack clear guidance on how cyberattacks might affect the equipment they rely on every day.
This becomes a problem when ship systems begin behaving strangely. Mariners described GPS showing incorrect positions or temporarily losing signal. It can be difficult to tell whether these incidents are equipment failures or signs of cyber interference.
Even when mariners suspect something may be wrong, many ships lack clear procedures for responding to cyber incidents. Participants frequently described situations where they would have to improvise if navigation or other digital systems behaved unexpectedly. Unlike equipment failures, which have established checklists and procedures, cyber incidents often fall into a gray area where responsibility and response plans are unclear.
Another challenge is the gradual disappearance of traditional navigation practices. For centuries, mariners relied on paper charts and celestial navigation to determine their position. Today, most commercial vessels rely almost entirely on electronic systems.
Many mariners noted that paper charts are not available onboard, and celestial navigation is rarely practiced. If GPS or electronic navigation systems fail, crews have limited ways to independently verify their position. One mariner bluntly described the risk to us: “If you don’t have charts and you’re being spoofed, you’re a little screwed.”
Increasing Connectivity, Increasing Risk
At the same time, ships are becoming more connected. Modern vessels increasingly rely on satellite internet systems like Starlink and remote monitoring tools to manage operations and communicate with shore.
While these technologies improve efficiency, they also expand the vulnerability of ship systems. Connectivity that allows crews to send emails or access the internet can also provide pathways for cyber threats to reach onboard systems.
As GPS spoofing becomes more common in regions experiencing geopolitical conflict, the challenges mariners described in our research are becoming harder to ignore. The oceans may seem vast and empty, but the digital signals that guide modern ships travel through crowded and contested space.
When those signals are manipulated, the consequences do not stay confined to military systems. They reach the commercial vessels that carry most of the world’s goods and the crews responsible for navigating them safely.
The Conversation is a nonprofit, independent news organization dedicated to unlocking the knowledge of experts for the public good. We publish trustworthy and informative articles written by academic experts for the general public and edited by our team of journalists.
{"id":null,"mode":"form","open_style":"in_place","currency_code":"USD","currency_symbol":"$","currency_type":"decimal","blank_flag_url":"https:\/\/factkeepers.com\/wp-content\/plugins\/tip-jar-wp\/\/assets\/images\/flags\/blank.gif","flag_sprite_url":"https:\/\/factkeepers.com\/wp-content\/plugins\/tip-jar-wp\/\/assets\/images\/flags\/flags.png","default_amount":500,"top_media_type":"none","featured_image_url":false,"featured_embed":"","header_media":null,"file_download_attachment_data":null,"recurring_options_enabled":true,"recurring_options":{"never":{"selected":true,"after_output":"One time only"},"weekly":{"selected":false,"after_output":"Every week"},"monthly":{"selected":false,"after_output":"Every month"},"yearly":{"selected":false,"after_output":"Every year"}},"strings":{"current_user_email":"","current_user_name":"","link_text":"Leave a tip","complete_payment_button_error_text":"Check info and try again","payment_verb":"Pay","payment_request_label":"Factkeepers.com","form_has_an_error":"Please check and fix the errors above","general_server_error":"Something isn't working right at the moment. Please try again.","form_title":"Help Support Factkeepers","form_subtitle":null,"currency_search_text":"Country or Currency here","other_payment_option":"Other payment option","manage_payments_button_text":"Manage your payments","thank_you_message":"Thank you for being a supporter!","payment_confirmation_title":"Factkeepers.com","receipt_title":"Your Receipt","print_receipt":"Print Receipt","email_receipt":"Email Receipt","email_receipt_sending":"Sending receipt...","email_receipt_success":"Email receipt successfully sent","email_receipt_failed":"Email receipt failed to send. Please try again.","receipt_payee":"Paid to","receipt_statement_descriptor":"This will show up on your statement as","receipt_date":"Date","receipt_transaction_id":"Transaction ID","receipt_transaction_amount":"Amount","refund_payer":"Refund from","login":"Log in to manage your payments","manage_payments":"Manage Payments","transactions_title":"Your Transactions","transaction_title":"Transaction Receipt","transaction_period":"Plan Period","arrangements_title":"Your Plans","arrangement_title":"Manage Plan","arrangement_details":"Plan Details","arrangement_id_title":"Plan ID","arrangement_payment_method_title":"Payment Method","arrangement_amount_title":"Plan Amount","arrangement_renewal_title":"Next renewal date","arrangement_action_cancel":"Cancel Plan","arrangement_action_cant_cancel":"Cancelling is currently not available.","arrangement_action_cancel_double":"Are you sure you'd like to cancel?","arrangement_cancelling":"Cancelling Plan...","arrangement_cancelled":"Plan Cancelled","arrangement_failed_to_cancel":"Failed to cancel plan","back_to_plans":"\u2190 Back to Plans","update_payment_method_verb":"Update","sca_auth_description":"Your have a pending renewal payment which requires authorization.","sca_auth_verb":"Authorize renewal payment","sca_authing_verb":"Authorizing payment","sca_authed_verb":"Payment successfully authorized!","sca_auth_failed":"Unable to authorize! Please try again.","login_button_text":"Log in","login_form_has_an_error":"Please check and fix the errors above","uppercase_search":"Search","lowercase_search":"search","uppercase_page":"Page","lowercase_page":"page","uppercase_items":"Items","lowercase_items":"items","uppercase_per":"Per","lowercase_per":"per","uppercase_of":"Of","lowercase_of":"of","back":"Back to plans","zip_code_placeholder":"Zip\/Postal Code","download_file_button_text":"Download File","input_field_instructions":{"tip_amount":{"placeholder_text":"How much would you like to donate? You can change this amount to anything you would like.","initial":{"instruction_type":"normal","instruction_message":"How much would you like to donate? You can change this amount to anything you would like."},"empty":{"instruction_type":"error","instruction_message":"How much would you like to donate? You can change this amount to anything you would like."},"invalid_curency":{"instruction_type":"error","instruction_message":"How much would you like to donate? You can change this amount to anything you would like."}},"recurring":{"placeholder_text":"Recurring","initial":{"instruction_type":"normal","instruction_message":"How often would you like to donate this?"},"success":{"instruction_type":"success","instruction_message":"How often would you like to donate this?"},"empty":{"instruction_type":"error","instruction_message":"How often would you like to donate this?"}},"name":{"placeholder_text":"Name on Credit Card","initial":{"instruction_type":"normal","instruction_message":"Enter the name on your card."},"success":{"instruction_type":"success","instruction_message":"Enter the name on your card."},"empty":{"instruction_type":"error","instruction_message":"Please enter the name on your card."}},"privacy_policy":{"terms_title":"Terms and conditions","terms_body":null,"terms_show_text":"View Terms","terms_hide_text":"Hide Terms","initial":{"instruction_type":"normal","instruction_message":"I agree to the terms."},"unchecked":{"instruction_type":"error","instruction_message":"Please agree to the terms."},"checked":{"instruction_type":"success","instruction_message":"I agree to the terms."}},"email":{"placeholder_text":"Your email address","initial":{"instruction_type":"normal","instruction_message":"Enter your email address"},"success":{"instruction_type":"success","instruction_message":"Enter your email address"},"blank":{"instruction_type":"error","instruction_message":"Enter your email address"},"not_an_email_address":{"instruction_type":"error","instruction_message":"Make sure you have entered a valid email address"}},"note_with_tip":{"placeholder_text":"Your note here...","initial":{"instruction_type":"normal","instruction_message":"Attach a note to your tip (optional)"},"empty":{"instruction_type":"normal","instruction_message":"Attach a note to your tip (optional)"},"not_empty_initial":{"instruction_type":"normal","instruction_message":"Attach a note to your tip (optional)"},"saving":{"instruction_type":"normal","instruction_message":"Saving note..."},"success":{"instruction_type":"success","instruction_message":"Note successfully saved!"},"error":{"instruction_type":"error","instruction_message":"Unable to save note note at this time. Please try again."}},"email_for_login_code":{"placeholder_text":"Your email address","initial":{"instruction_type":"normal","instruction_message":"Enter your email to log in."},"success":{"instruction_type":"success","instruction_message":"Enter your email to log in."},"blank":{"instruction_type":"error","instruction_message":"Enter your email to log in."},"empty":{"instruction_type":"error","instruction_message":"Enter your email to log in."}},"login_code":{"initial":{"instruction_type":"normal","instruction_message":"Check your email and enter the login code."},"success":{"instruction_type":"success","instruction_message":"Check your email and enter the login code."},"blank":{"instruction_type":"error","instruction_message":"Check your email and enter the login code."},"empty":{"instruction_type":"error","instruction_message":"Check your email and enter the login code."}},"stripe_all_in_one":{"initial":{"instruction_type":"normal","instruction_message":"Enter your credit card details here."},"empty":{"instruction_type":"error","instruction_message":"Enter your credit card details here."},"success":{"instruction_type":"normal","instruction_message":"Enter your credit card details here."},"invalid_number":{"instruction_type":"error","instruction_message":"The card number is not a valid credit card number."},"invalid_expiry_month":{"instruction_type":"error","instruction_message":"The card's expiration month is invalid."},"invalid_expiry_year":{"instruction_type":"error","instruction_message":"The card's expiration year is invalid."},"invalid_cvc":{"instruction_type":"error","instruction_message":"The card's security code is invalid."},"incorrect_number":{"instruction_type":"error","instruction_message":"The card number is incorrect."},"incomplete_number":{"instruction_type":"error","instruction_message":"The card number is incomplete."},"incomplete_cvc":{"instruction_type":"error","instruction_message":"The card's security code is incomplete."},"incomplete_expiry":{"instruction_type":"error","instruction_message":"The card's expiration date is incomplete."},"incomplete_zip":{"instruction_type":"error","instruction_message":"The card's zip code is incomplete."},"expired_card":{"instruction_type":"error","instruction_message":"The card has expired."},"incorrect_cvc":{"instruction_type":"error","instruction_message":"The card's security code is incorrect."},"incorrect_zip":{"instruction_type":"error","instruction_message":"The card's zip code failed validation."},"invalid_expiry_year_past":{"instruction_type":"error","instruction_message":"The card's expiration year is in the past"},"card_declined":{"instruction_type":"error","instruction_message":"The card was declined."},"missing":{"instruction_type":"error","instruction_message":"There is no card on a customer that is being charged."},"processing_error":{"instruction_type":"error","instruction_message":"An error occurred while processing the card."},"invalid_request_error":{"instruction_type":"error","instruction_message":"Unable to process this payment, please try again or use alternative method."},"invalid_sofort_country":{"instruction_type":"error","instruction_message":"The billing country is not accepted by SOFORT. Please try another country."}}}},"fetched_oembed_html":false}