What agencies were compromised in the MH370 hack?

Question

Accepted Answer

Agencies Compromised in MH370 Hack Investigation Identified

An alleged hacking attempt targeting classified information related to the Flight MH370 investigation impacted several key Malaysian government agencies and Malaysia Airlines. Investigations by Malaysian authorities and Interpol revealed that computers within the Civil Aviation Department (DCA), the National Security Council, and Malaysia Airlines (MAS) were infected with malware. This malicious software was reportedly disguised as a news article about the missing plane and distributed via email to high-ranking officials on March 9, 2014, the day after the aircraft disappeared.
Malware Distribution Method

The cyber security breach was initiated through a phishing email campaign. Officials received emails on March 9, 2014, containing an attachment that appeared to be a PDF document. Upon opening this file, the malware was installed on the targeted computers. This tactic exploited the immediate interest in the disappearance of Malaysia Airlines Flight MH370, which had been reported missing on March 8, 2014.
Targeted Agencies and Information Siphoned

The malware specifically infected approximately 30 computers involved in the multi-nation probe into MH370. The agencies confirmed to have been targeted included the Civil Aviation Department (DCA), which plays a crucial role in flight operations and investigations, and the National Security Council, responsible for national security matters. Malaysia Airlines (MAS), the operator of the missing flight, was also among the compromised entities. The malicious software was designed to extract confidential data, including meeting minutes and classified documents, from these officials' computers.
Transmission to China and Investigation Scope

Following the malware deployment, network administrators within the affected agencies reported significant congestion due to a flood of emails originating from the infected machines. CyberSecurity Malaysia's investigation indicated that these emails, containing the siphoned confidential data, were transmitted to an IP address located in China. This development prompted CyberSecurity Malaysia to request that China's Internet Service Providers block the transmissions and to shut down the infected machines. The investigation into identifying the perpetrators is being conducted collaboratively by CyberSecurity Malaysia, the Royal Malaysia Police, and Interpol.

Reading history

Hide →

This history is cleared when the page is closed.

What agencies were compromised in the MH370 hack?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends