Sète, France, December 18, 2025
French authorities are investigating a suspected cyberattack targeting the Fantastic, an international passenger ferry in Sète, France. The attack involved Remote Access Trojan (RAT) malware, raising alarms about the vulnerability of maritime transport. Following intelligence from Italy, two crew members were arrested, with one facing serious charges. The incident highlights the need for enhanced cybersecurity measures in the maritime sector amidst rising cyber threats.
Jacksonville, FL
Cybersecurity Alert: Ferry Malware Investigation in France
French authorities caution against rising cyber threats in maritime transport
The recent report of a suspected cyberattack targeting the Fantastic, an international passenger ferry docked in Sète, France, has raised alarm bells across Europe. French authorities are working diligently to investigate potential malware discovered within the ferry’s computer systems—specifically, a type of software known as a Remote Access Trojan (RAT). This incident not only highlights the increasing vulnerability of maritime transport to cyber threats but also raises broader concerns about national security in the face of evolving threats.
The investigation, led by the General Directorate of Internal Security (DGSI), was sparked by intelligence shared by Italian authorities, indicating that the ferry’s systems might have been compromised. As a small business hub ourselves, Jacksonville entrepreneurs understand the importance of cybersecurity. For local businesses, learning from such incidents could strengthen their operational resilience against potential cyberattacks.
Investigation Details
The DGSI is actively probing the situation following reports of RAT software embedded in the ferry’s computer systems. This type of malware poses significant risks as it enables unauthorized users to remotely control computer systems. The Fantastic, owned by the Italian shipping company GNV, was temporarily grounded for security checks in the Mediterranean port of Sète. The swift action taken by French authorities to investigate is commendable and reflects a proactive approach to safeguarding maritime operations.
During the investigation, two crew members were arrested. The Latvian crew member remains in custody and faces serious charges related to hacking and conspiracy in service of an unnamed foreign power. Meanwhile, the Bulgarian crew member was released without charges after questioning. Such decisive actions underscore the importance of accountability in maintaining the security of transportation networks.
Background Context
Cybersecurity threats targeting maritime vessels have become increasingly prevalent. The maritime industry has seen a series of cyberattacks in recent years, highlighting vulnerabilities that could impact passenger safety and operational integrity. For instance, the Massachusetts Steamship Authority experienced a ransomware attack in June 2021, causing significant operational delays. Similarly, an August 2021 cyberattack affected the Compagnie générale de navigation sur le Lac Léman, resulting in stolen customer bank details. These incidents reinforce the message that robust cybersecurity measures are essential for protecting both businesses and consumers.
The current investigation into the Fantastic reflects ongoing efforts by international authorities to address and combat the threats posed by cyber warfare. With growing concerns about Russian hybrid warfare, including cyberattacks and disinformation campaigns, multiple European nations, including France, have elevated their vigilance against such potential incursions.
Conclusion
The ongoing investigation into the cyberattack on the Fantastic serves as a stern reminder of the vulnerability present within the maritime sector and other industries. For Jacksonville businesses, these developments highlight the necessity for increased focus on cybersecurity measures. By prioritizing operational resilience and embracing advanced security protocols, small businesses can better protect themselves against evolving cyber threats. As our city continues to thrive, remaining vigilant will be key to sustaining economic growth in the face of challenges.
We encourage everyone to stay informed about cybersecurity practices and support local businesses as they navigate these complexities in today’s interconnected world.
What is the Fantastic ferry?
The Fantastic is an international passenger ferry owned by the Italian shipping company GNV, with a capacity of over 2,000 passengers. It was docked in the Mediterranean port of Sète, France, when malware was discovered in its computer systems.
What is RAT software?
RAT stands for Remote Access Trojan. It is a type of malware that allows unauthorized users to control computer systems remotely, posing significant security risks.
What charges are the Latvian crew member facing?
The Latvian crew member is facing charges related to hacking and conspiracy in service of an unnamed foreign power. The Bulgarian crew member was released without charges after questioning.
What is hybrid warfare?
Hybrid warfare refers to a strategy that blends conventional military tactics with irregular tactics, such as cyberattacks, disinformation campaigns, and sabotage, often making it difficult to attribute actions to a specific state or actor.
Has the ferry resumed operations?
Yes, the ferry has resumed operations after undergoing security checks to its computer system while held in port. The French authorities confirmed the safety of the vessel before allowing it to continue its services.
| Feature | Details |
|---|---|
| Incident | Discovery of RAT malware in the computer systems of the Fantastic ferry docked in Sète, France. |
| Investigation | Led by France’s General Directorate of Internal Security, with assistance from Italian authorities. |
| Arrests | Latvian crew member arrested; Bulgarian crew member released without charges. |
| Charges | Latvian crew member faces charges related to hacking and conspiracy in service of an unnamed foreign power. |
| Resumption of Service | The ferry resumed operations after security checks confirmed the safety of its computer systems. |
| Background | France and other European nations have heightened alerts against suspected Russian “hybrid warfare,” including cyberattacks and disinformation campaigns. |
Deeper Dive: News & Info About This Topic
HERE Resources
Author: STAFF HERE JACKSONVILLE WRITER
The JACKSONVILLE STAFF WRITER represents the experienced team at HEREJacksonville.com, your go-to source for actionable local news and information in Jacksonville, Duval County, and beyond. Specializing in "news you can use," we cover essential topics like product reviews for personal and business needs, local business directories, politics, real estate trends, neighborhood insights, and state news affecting the area—with deep expertise drawn from years of dedicated reporting and strong community input, including local press releases and business updates. We deliver top reporting on high-value events such as the Jacksonville Jazz Festival, Riverside Arts Market, and World of Nations Celebration. Our coverage extends to key organizations like the Jacksonville Chamber of Commerce and JAXUSA Partnership, plus leading businesses in logistics, healthcare, and entertainment that power the local economy such as CSX Corporation, Baptist Health, and VyStar Credit Union. As part of the broader HERE network, including HEREOrlando.com, HEREStPetersburg.com, HERETallahassee.com, and HERETampa.com, we provide comprehensive, credible insights into Florida's dynamic landscape.
