Skip to content

Threat actor

Skydio

Last fetched

Skydio is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.

Description

Skydio, founded in 2014, is a U.S. drone manufacturer and developer of autonomous flight technology. The company develops and distributes in AI-powered drones equipped with autonomous capabilities and computer vision systems. Since launching their R1 drone in 2018, Skydio has served over 1,200 enterprise customers including every branch of the U.S. military. Skydio became the first U.S. drone company to reach a $1 billion valuation, generating over $100 million in annual revenue in 2023, with 30% coming from software solutions. The company has a local office in Israel and sells its drones to the Israeli military. The Israeli company DefenSync is its authorized partner in Israel. Based on a report by Theia Chatelle, the Yale Police Department (YPD) utilized Skydio drones as part of their surveillance program targeting pro-Palestine student protesters. According to a Wired investigation, a Skydio X10 drone equipped with multiple high-resolution cameras, thermal imaging, powerful zoom capabilities, and onboard AI was detected monitoring pro-Palestine protesters at the Democratic National Convention in Chicago, with the same drone later being spotted above the Israeli consulate during subsequent protests. In October 2025, The Washington Post revealed that Skydio provided the U.S. Immigration and Customs Enforcement (ICE) remote-controlled drones, reportedly used to film protesters and monitor public demonstrations.

Techniques by tactic

No ATT&CK techniques are recorded for Skydio in WhisperGraph.

Attributed infrastructure

None published. WhisperGraph carries no ATTRIBUTED_TO edge to Skydio today — this states the absence of a published link, not that Skydio has no infrastructure.

References

© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Related pages

Pivot from Skydio into its techniques, tactics and any attributed infrastructure.

Queries

Resolves the slug to this actor, merging every duplicate node sharing the same name.


MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
       a.references AS references, a.campaigns AS campaigns
LIMIT 25
Run yourself →

Techniques this actor uses, grouped by the tactic each one serves.


MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000
Run yourself →

Infrastructure publicly attributed to this actor.


MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.