The radar story and the 9 March cyberattack
Working chart · tracks, delays, and a spear-phish of the investigation
Two panels. Left: civilian secondary, Malaysian military primary, Thai paint disclosed ten days later, and the 12-hour lag before the civilian rescue centre was told. Right: one day after the loss, officials on the investigation were hit with a spear-phish that CyberSecurity Malaysia later said stole classified material toward an IP in China. Presence of a hack is confirmed as that agency’s public account. What was in the take — and whether it included radar — is still open.
The radar panel restates facts already in this file and names two Malaysian Air Defence feeds: BD764 (secondary, 10-second samples, ends when the transponder drops at 01:21 MYT) and BE144 (primary, 10-second samples, westbound after the turn). The chart has BE144 ending at 18:02:59 UTC, with the official reconstruction later resuming to a last military return at 18:22:12 UTC. The 2018 report already describes a Pulau Perak paint near 18:01:59, a gap, then 18:15:25–18:22:12. The live question is the source of those later points, not whether a westbound primary track exists. Thai Surat Thani, the ministerial 10:30 / ARCC 22:30 lag, and altitude/speed blips beyond 777 performance are already confirmed separately. The cyber panel is the 9 March intrusion of investigation networks — filed as its own event. A working chart is not a finding that the hack explains the radar delays, or that radar data was in the stolen set.
Sources
- Working chart · radar story and 9 March cyberattack
- Malaysian Safety Investigation Report 2018 — radar reconstruction
Related
Two waves of MH370-themed cyberattacks
9 March official-network intrusion · March–April public malware lures
BD764 and BE144 — named radar feeds, and a gap after 18:02:59 UTC
Secondary ends with the transponder · primary westbound · later points still to source
West-track disclosure lag — ministerial 10:30, ARCC 22:30, Thai 9–10 days
8 March and 18–19 March 2014
Malaysian military primary-radar track
17:21–18:22 UTC · westbound after IGARI
Investigation networks spear-phished the day after MH370 vanished
CyberSecurity Malaysia · ~30 PCs · disclosed 20 August 2014
Thailand discloses Surat Thani military-radar paint
18–19 March 2014 · ~9–10 days after disappearance
What was actually taken on 9 March — and did it include radar?
Remote-control claims versus evidence gaps
Patent, QF-16, Teso FMS proof-of-concept · installation on 9M-MRO still open