Is Your Aircraft's Wi-Fi Making You a Target? What Michigan Business Aviation Passengers Should Know

Your aircraft is parked at the FBO. Your passengers are connected to the cabin Wi-Fi, catching up on email between legs. In the public parking lot 200 feet away, someone is sitting in a car with a high-gain directional antenna, quietly working through your network.

You would never know it was happening. And according to cybersecurity experts who work specifically in business aviation, it is not theoretical.

Why Private Aviation Is a High-Value Target

The logic is simple. Hackers know that private aircraft carry people whose data is worth a lot of money. Executive schedules. Proprietary deal information. Wire transfer authorization. Trade secrets. And they know that many private aircraft have no password on the cabin Wi-Fi, because the owner did not want the inconvenience of signing in.

One cybersecurity CEO who works with business aviation clients put it directly: if he were tasked with compromising a major corporation, he would not waste time trying to breach their corporate firewall. He would wait for their Gulfstream to land at a private terminal and attack it from the parking lot.

The threat profile has escalated further with AI. Deepfake voice technology now requires only a few minutes of audio, the kind freely available from any C-suite executive who has appeared in a podcast, earnings call, or company video, to create a convincing impersonation. These are not clumsy fakes. Call center staff at Fortune 500 companies report receiving automated deepfake calls almost daily. In one documented case, a hacker used a deepfake voice to authorize a $25 million wire transfer from a multinational financial institution. That is not an edge case anymore. That is the threat environment.

Why FBO Ramps Are Specifically Risky

Most private FBO terminals are designed for operational convenience, with aircraft parked close to terminal buildings, easy vehicle access, and minimal perimeter barriers. That same design that makes FBOs operationally efficient makes them accessible to bad actors with directional antennas.

A Yagi antenna, available for a few hundred dollars and commonly used in industrial applications, can maintain a stable two-way connection with an aircraft's Wi-Fi network from a public parking area. The attacker does not need to be near the aircraft. They need line of sight and patience.

Add to that the fact that hackers increasingly track executive movements through social media, hacked calendars, and public schedule information, and the picture becomes clear: if a high-value target is on your aircraft, the people who want access to that target's data may already know your aircraft is on the ramp.

5 Things Flight Departments Should Be Doing Now

1. Put a password on the cabin Wi-Fi and rotate it.

This sounds basic because it is. An open cabin network is an open invitation. Set a strong password, update it regularly, and do not share it casually. The inconvenience of signing in is trivial compared to the exposure of leaving the door open.

2. Require multi-factor authentication on everything that matters.

Email, VPN access, financial systems, and anything requiring a login should require MFA. This is the single most effective technical control against credential theft, including credentials captured via cabin Wi-Fi interception.

3. Create a device policy for passengers.

Personal devices connecting to the aircraft's network and then to the corporate network create a bridge that attackers can use. Either prohibit it, or require that personal devices be scanned before connecting. This is an executive conversation worth having before the next flight, not after an incident.

4. Train your crew and passengers on deepfake and social engineering threats.

The technical defenses do not matter if someone on your team authorizes a fraudulent wire transfer because they received a convincing voice call from an apparent executive. Recurring training on how these attacks work and the red flags to watch for is the most cost-effective cybersecurity investment available.

5. Have your avionics reviewed with network integration in mind.

Modern avionics systems increasingly share data infrastructure with cabin connectivity. An avionics upgrade that touches your aircraft's data architecture should be reviewed for its network security implications alongside its functional benefits. If you do not know how your avionics and cabin Wi-Fi are connected, that is worth finding out.

What Good Protocol Actually Looks Like

A corporate flight department in the Midwest recently implemented a two-step authentication process for all passengers connecting to cabin Wi-Fi on their fleet of three aircraft. The policy came after their IT security team ran a penetration test on the fleet and demonstrated exactly how accessible the cabin networks were from adjacent vehicles on the ramp. The department head described the reaction from senior leadership when they saw the test results: nobody argued about the inconvenience of a password after that.