Forget the aircraft, get into the TERPS databases before they get into the FMS and tablets. Alter the DA/MDA, nav freqs, final approach course, etc. May be caught quickly at bigger airports and not affect heavies, but it could take out a bunch of regionals, 135s, and 91 at non radar fields before being identified.