Global GPS Spoofing Study Reveals Red Sea Activity Before Ship Grounding
Global Analysis of Maritime GPS Spoofing Reveals Widespread Anomalies Across Key Shipping Routes A comprehensive examination of maritime tracking data from 367,000 vessels has uncovered extensive GPS spoofing activity, including patterns observed in the Red Sea months prior to a major shipping incident in 2025.
Study Details
Researchers from the Georgia Institute of Technology conducted the first large-scale study of regional GPS interference using real-world vessel traffic data, publishing their findings on September 29 ahead of a presentation at the 2027 IEEE Symposium on Security and Privacy. The study analyzed Automatic Identification System (AIS) data, which vessels use to transmit navigational information including location, speed, and course.
Key Findings
By focusing on coordinated anomalies rather than isolated errors, the team identified 17,936 instances of suspicious activity involving 2,663 vessels between November 2024 and February 2025. These episodes included vessels reporting impossible movements such as exceeding 60-knot speeds, appearing on landmasses, or deviating more than five kilometers from expected routes. Thirteen of these cases were confirmed as spoofing events, while nine others showed strong evidence of coordinated interference. Nine additional cases remained inconclusive but suggested potential spoofing activity.
Regional Anomalies
Vessels exhibited diverse spoofing patterns, including circular motion with stable speed readings, sudden linear trajectories spanning tens of kilometers, and simultaneous appearances at inland locations. One notable example involved multiple ships reporting positions near Jordan’s Queen Alia International Airport, indicating regional GPS disruption. Similar anomalies were detected in the Black Sea, Eastern Mediterranean, Red Sea, East Asian waters, Baltic region, and Strait of Hormuz. Newly identified zones included the Canary Islands, Gulf of Mexico, and Panama Canal.
MSC Antonia Incident
In the Gulf of Mexico, nearly 200 vessels displayed synchronized positional shifts on December 31, 2024. The study linked historical data to a 2025 maritime incident involving the MSC Antonia container ship, which ran aground in the Red Sea after an event attributed to GPS spoofing. Researchers found identical linear displacement patterns near Port Sudan in January 2025, five months before the grounding. The same spoofing signature appeared in data from the bulk carrier Charmous and 11 other vessels. The false tracks matched the precise latitude recorded during the MSC Antonia incident.
Limitations and Challenges
Persistent spoofing activity was also observed in the Strait of Hormuz, with anomalies detected more than a year before widespread GPS interference in the Persian Gulf during the 2026 Iran conflict. The research team identified varying spoofing characteristics across regions, including multi-day disruptions in the Black Sea and intermittent bursts near Gaza. In the Gulf of Mexico and Panama Canal, spoofing events lasted shorter durations. Analysis of sanctioned vessels revealed 16 to 215 ships potentially falsifying their positions. The Russian tanker Hyperion, under sanctions, exhibited false inland locations near Vladivostok while transporting oil to China, along with implausible movements through East Asian waters.
Conclusion
The study acknowledges limitations in identifying the source of spoofing, as AIS data only captures reported positions rather than the originating signals. This restricts the ability to trace interference to specific transmitters or operators. Researchers note that military operations, air defense systems, and regional conflicts may explain some activity, but these connections remain speculative. The detection method focuses on large-scale interference affecting multiple vessels, making it less effective for short-duration or single-vehicle spoofing events. The authors emphasize their findings represent a minimum estimate of maritime spoofing activity. Despite these constraints, the study demonstrates that recurring GPS interference can be detected through vessel movement patterns before critical navigation incidents occur. The research underscores the need for continuous monitoring systems to mitigate risks associated with GPS vulnerabilities in maritime operations.
About Author
English