Resources

MyCERT: MH370-themed backdoor and fake-transcript spear-phish

MA-381 · 24 March 2014 · MA-386 · 18 April 2014

Confirmed public advisories, a different campaign from the 9 March official-network intrusion. 24 March: a Facebook-app lure dropping a backdoor with remote-control (C2) capability. 18 April: emails posing as an investigation team / ICAO portal item, password-protected archive, fake MH370 transcript, command-and-control. Aimed at organisations and the public, not shown to be the DCA/NSC/MAS breach.

Landing MH370

Jeff Wise · Finding MH370 S1E27 · 28 November 2024 · 45:12

The northern-landing telling: discard or spoof BFO, keep BTO, fly borders, land at a long Central Asian runway (Wise’s 2015 candidate was Yubileyniy / Baikonur). Requires the African debris field to be explained away.

A BIG SAFARI collection architecture around MH370

The family is documented. A specific 8 March operation is open.

Gorgon Stare, Blue Devil and MAGIC/Orion are one overlapping ISR family under 645 AESG / BIG SAFARI: same office, overlapping WAMI/SIGINT sensors, reusable GFE through Greenville, and a podded architecture meant to move between airframes. That family is confirmed. Whether any of it collected MH370 is not established and is not ruled out.

Carlyle Group, Freescale, 9/11 money and MH370

Briefing video: Carlyle Group as a common name across 9/11-era finance, Freescale ownership, and the twenty Freescale employees on MH370. Bush and bin Laden family investment histories are named in the same film.

Investigation networks spear-phished the day after MH370 vanished

CyberSecurity Malaysia · ~30 PCs · disclosed 20 August 2014

Confirmed as CSM’s public account. On 9 March, officials at the Department of Civil Aviation, the National Security Council and Malaysia Airlines were sent malware disguised as a news article that the aircraft had been found. About thirty computers were infected. Outbound mail carrying confidential files, including meeting minutes and classified documents, some related to MH370, was traced to an IP in China. CSM shut the machines down and asked Chinese providers to block the traffic. Police and Interpol were involved. What exactly was stolen is still unpublished.

Two waves of MH370-themed cyberattacks

9 March official-network intrusion · March–April public malware lures

Working chart of two separate campaigns. Attack one: 9 March spear-phish of officials at the Department of Civil Aviation, National Security Council and Malaysia Airlines — CyberSecurity Malaysia’s public account, disclosed in August. Attack two: MyCERT alerts on 24 March and 18 April about MH370-themed backdoors and a fake investigation-transcript phish aimed more widely. Destination IP in China is not the same as a finding that Beijing ran the operation.

What is the bridge from the ISR family to MH370?

Gorgon Stare, Blue Devil and MAGIC/Orion are a documented family under BIG SAFARI. The open question is one specific platform, sensor, command link, contract, deployment or test event in both that family and the MH370 window. Until that object is found, involvement is not established — and is not ruled out.

Indonesia: Lhokseumawe and Sabang did not paint MH370

14–19 March 2014 statements

Indonesian Air Force/Defence: no detection of MH370 crossing Indonesian airspace. Lhokseumawe cited ~240 nm capability. Formal denial of concealment.

MH370 / US Military ISR Working Research Report v1

Working paper · 18 September 2026

Working paper on US military ISR programmes in the MH370 window: MAGIC, Orion, Gorgon Stare, Blue Devil and remote-control patents, read as one overlapping family under BIG SAFARI. The family is documented. A specific MH370 collection is not established and is not ruled out.

Raytheon MTS award for HC/MC-130J — one day before MH370

$10.072556m · 10 systems · 7 March 2014

Chronology fact only. No evidence these turrets or aircraft observed MH370. HD-capable MTS-B was entering USAF inventory through 2013–14.

A specific MH370 collection event is not yet on the record — and is not ruled out

MAGIC/Orion, Gorgon Stare and Blue Devil form a documented overlapping family under BIG SAFARI. That family is not, by itself, a platform, sensor or sortie on 8 March 2014. The same material does not rule such a deployment out.

Does the classified Lin addendum name MH370 or a satellite video?

Public FOIA production does not. The addendum is unreleased. Until it is, the leaker identification remains a Forbes attribution.

Flight MH370 — 17 Fascinating Facts

J. Jericho / The Free School · March 2019 · Drive backup PDF

Independent compilation of official-file facts with annexes (simulator pages, passenger list, cargo docs, Boeing patent, ACARS log). Not an official report. Several numbered “facts” still need MOT/ATSB cross-check.

Flight MH370 Vanished 10 Years Ago. What’s Happened Since?

CNA Insider · Insight · 8 March 2024 · 47:24

Tenth-anniversary Singapore broadcast: Inmarsat handshake rings, the 120,000 km² ATSB box, family pressure, and the state of independent debris work. Does not adopt a cockpit perpetrator.

Kadena P-3C tasked to the MH370 search

Announced 8 March 2014 · on station 9 March

Confirmed search tasking. Seventh Fleet said a P-3C would leave Kadena Air Base, Okinawa, shortly on 8 March. Naval Today: the P-3 arrived on station the afternoon of 9 March. VP-16 P-8A Poseidon had been in theatre from December 2013 — basing, not a 7–9 March sortie card.

MH370 departs Kuala Lumpur

16:42 UTC · 00:42 MYT 8 March 2014

Malaysia Airlines Flight 370, a Boeing 777-2H6ER registered 9M-MRO, takes off from KLIA runway 32R bound for Beijing Capital International Airport with 227 passengers and 12 crew.

MH370: The Plane That Disappeared

Netflix · three episodes · March 2023

Louise Malkinson’s three-part series gives one episode to each of three tellings: the pilot, a Russian hijack (Jeff Wise), and a US intercept (Florence de Changy). Families and Malaysia Airlines crisis staff are interviewed. It is a survey of hypotheses, not a finding.

No group claimed MH370

Twelve years on, no organisation has issued a credible claim of responsibility. Absence of a claim is not proof of innocence; it is a fact that sits next to the stolen passports.

Towed-pinger detections — not MH370

April 2014

Acoustic detections in the search area are investigated with an AUV. No wreckage is found. The detections are not attributed to 9M-MRO’s recorders.

A NEW Trace! The FULL MH370 Story, so Far

Mentour Pilot · Petter Hörnfeldt · 16 March 2024 · 56:06

Type-rated 737 captain’s reconstruction from the 2018 report, Inmarsat BTO/BFO, and the Blelly–Marchand end-of-flight paper. Argues the transponder was selected off in two steps, not failed as a unit. Closes with a WSPR lead and a request to restart the search.

Can WSPR actually track MH370?

Godfrey’s circle near 29.1°S 99.9°E has not been AUV-searched. The method is unpublished in accredited journals and the database is closed. Correlation with simulator coordinates is not identification.

Deep Dive: MH370 Episode Three — The Turn Back

Deep Dive Podcast Network · 28 September 2023 · 31:12

Podcast reconstruction of the air turn-back after IGARI: military primary radar, heading 273°, altitude and speed blips the 2018 report itself flags as noisy.

Factual Information — MH370

Malaysian investigation team · interim releases 2014–2015

Early factual compilations: aircraft history, crew, cargo, ATC transcripts, radar, SATCOM. Released before debris and before the 2018 analysis chapters. The 8 March 2015 issue (updated 15 April 2015) is held here as a downloadable original.

Inside the Investigation: The Search for MH370 Truth

7NEWS · Peter Foley, Joe Hattley

Former lead search officials on internal protocol, sonar-mapping mistakes, and why a debris field can still be found. An Australian operational view, not a cockpit narrative.

Malaysian summary of possible MH370 debris

ICAO Annex 13 Team · updated 2017

Itemised list of wreckage recovered on western Indian Ocean coasts, with confirmation classes: confirmed, almost certain, highly likely, likely.

MH370 Daily Research — working papers

18 September 2026

Working ISR report, source ledger and master chronology gathered the same day, with a cited-URL set pointing at contemporary MAGIC, Orion and Gorgon Stare reporting.

MH370 Disappearance: Minute by Minute

Licensed 53-minute feature · 2025–26 reprints

The same ~53:13 timeline film appears under DocuReal, Spark, Wonder, Real Stories and Progress with new title cards. Content is the public night: 00:41 takeoff, 01:19 sign-off, Malacca radar, Inmarsat, African debris.

MH370 Research Master Log

Investigation chronology · 18–20 September 2026

Running chronology of findings: cargo, 2011–2013 ISR programmes, radar disclosure on the westbound track, MAGIC budget exhibits, and the alleged-video file.

MH370 search operation 2025/2026 — update to families

Ministry of Transport Malaysia · 8 March 2026

Official family briefing: 28 operational days, ~7,571 km² of the 15,000 km² box surveyed, no wreckage confirmed. Contract later extended to June 2027.

MH370: The Forensic Evidence

Capt. John Cox · Sit Down With Sid · 13 June 2026 · 37:10

US accident investigator. Reads the transponder drop at the FIR boundary, the southwest run to MEKAR, the northwest turn, and the 300-mile ocean leg as too many coincidences for a random failure. Preponderance, in his view: a deliberate act, high likelihood the captain.

MH370: The Untold Story / The Cover-Up

Peter Stefanovic · Sky News 2020 · later Amazon two-part

Interviews with Tony Abbott, Warren Truss and Sir Angus Houston on the first hours, plus Capt. Byron Bailey’s claim that the aircraft was hidden on purpose. Radar-sharing delay is documented; “hidden” is Bailey’s inference.

New Evidence, New Answers? The Endless Search For Flight MH370

Independent overview of debris and Ocean Infinity

Survey of African-coast debris identifications and whether a marine-robotics return can close the case. No new wreckage coordinate.

Safety Investigation Report — MH370

Malaysian ICAO Annex 13 Team · 30 July 2018

The official accident report. Cause undetermined. Diversion likely from manual inputs; third-party intervention not excluded; 00:19 log-on treated as fuel exhaustion. No wreckage, no recorders.

The MH370 Mystery — Parts 1 and 2

Easy Documentary · June 2025

Two-part compilation: Part 1 the public crash/disappearance narrative; Part 2 “inside the investigation’s biggest failures.” Secondary retelling of already-filed records.

The Operational Search for MH370

ATSB AE-2014-054 · final search report 2017

Australia’s account of how the southern Indian Ocean search box was drawn, refined, and exhausted over 120,000 km². Primary technical home of the 7th-arc argument used in the field.

The Search for MH370 — Journal of Navigation

Ashton, Dickinson, Hall, Roberts, Smith · Inmarsat · 2014/15

The paper that showed how BTO and BFO from routine signalling units can reconstruct a long flight the airline did not know it still had.

The Search for MH370 is Back ON!

Mentour Now · 24 March 2025 · 23:19

Follow-up on Malaysia’s 2025 Ocean Infinity restart. Recaps BTO as range and BFO as Doppler, the southern-arc choice, and overlays Godfrey’s WSPR figure-eights on a line through the captain’s simulator coordinates.

Twenty Freescale employees on MH370

Company-confirmed 8 March 2014

Confirmed passenger fact. Project assignments, especially defence/avionics/inertial work, are unresolved. FXAS21000 gyro sampling in July 2013 is an adjacent product date only.

Why Planes Vanish: The Mystery of Flight MH370

BBC · tenth-anniversary feature · WSPR

BBC anniversary piece that brought Weak Signal Propagation Reporter analysis to a general audience. Richard Godfrey’s method is not peer-reviewed; the data are not an open, reproducible track.

Wikipedia — search for MH370

South China Sea to Ocean Infinity 2027

Most expensive aviation search. Surface 4.5 million km² in 2014; ATSB 120,000 km² underwater; Ocean Infinity 112,000 km² in 2018 and a 15,000 km² 2025–27 box. No main wreckage.

WSPR detections trace MH370 to ~29.1°S 99.9°E

Richard Godfrey’s latest published circle (radius 30 km, ~2,827 km²) has not been covered by an AUV launch. Earlier published points moved. Method is not peer-reviewed; the database is not independently auditable.

Wikipedia — Malaysia Airlines Flight 370

en.wikipedia.org · living page · read 18 September 2026

Crowd-maintained digest of the public case: 239 dead, 9M-MRO, 8 March 2014, KUL–PEK, cause undetermined. Useful as a citation map into ATSB, MOT, Inmarsat and Ocean Infinity. Not a primary source.

They May As Well Have Been Flying the Plane

MH370 song, February 2026

Nic Moneypenny’s MH370 song: who signed off the project; FOIA walls; families still waiting. Dedicated to the search for what is still held back as national security.

Jeff Wise

Aviation journalist · Finding MH370

CNN-era MH370 analyst. Author of the 2015 northern-hijack / spoofed-BFO thesis. Host of Finding MH370. Treats the default pilot-suicide search as a failed prediction because the wreck is still unfound.

ICAO

GADSS tracking standards after MH370

15-minute position reporting in normal flight; faster in distress. The regulatory aftershock.

ICAO GADSS tracking standards

Global Aeronautical Distress and Safety System · post-MH370

The regulatory aftershock: aircraft must report position at least every 15 minutes in normal flight, and more often in distress, so a 777 cannot again fly dark for six hours unnoticed.

Lockheed Martin Compact Fusion Reactor

Public Skunk Works programme · Thomas McGuire · not an MH370 finding

Confirmed as a public Lockheed Skunk Works fusion project, discussed openly around 2014, with patents including US9947420 (magnetic-field plasma confinement; filing family 2 April 2014). Quiet Exodus treats it as the power core of a clandestine spacetime platform. That leap is the thesis, not the patent.

The Debris Swarm

Jeff Wise · Finding MH370 S1E19 · 15 November 2024 · 39:26

After six months with only the Réunion flaperon, a cluster of western-Indian-Ocean pieces appears in 2016. CSIRO reverse-drift and barnacle work are the scientific spine; the swarm’s timing is the puzzle Wise keeps open.

Fariq Abdul Hamid

First officer · MH370

Not heard on the last ATC handover. His mobile registered with a Penang tower at 17:52:27 UTC, corroborating the westbound primary-radar track. About 2,763 hours; this was a 777 training sector.

Malaysia Airlines

Operator of MH370 / 9M-MRO

Declared the flight missing at 23:24 UTC while the SDU was still a live Inmarsat terminal.

The Remarkable Blaine Gibson

Jeff Wise · Finding MH370 S1E21 · 18 November 2024 · 52:58

Wise’s case against treating Gibson’s beach finds as ordinary luck: “No Step” in 20 minutes on a Mozambique sandbar; a Madagascar piece appearing between two passes of a TV crew; village objects later identified as 777 interior.

Zaharie Ahmad Shah

Pilot in command · MH370

Last attributed radio call: “Good night Malaysian three seven zero.” Home simulator files exist; the 2018 report did not treat them as a reconstructed plan. Who was flying after IGARI is open.

Al-Qaeda meeting, Kuala Lumpur, January 2000

Hijackers later on the 9/11 flights attended an al-Qaeda meeting in Kuala Lumpur in January 2000. CIA tracked the meeting. Fourteen years later MH370 left the same city’s airport.

Angel Fire

Wide-area airborne surveillance · lineage into Blue Devil Block 1

USAF/SOCOM WAAS system. Congressional documentation describes Blue Devil Block 1 as integrating Angel Fire-derived wide-area imagery with signals intelligence on manned aircraft. Confirmed as the WAAS ancestor in this family, not as an MH370 collector.

Ashton Forbes

Independent researcher · alleged thermal and wide-area video

Source of widely circulated alleged thermal/WAMI videos and platform identifications. Those identifications are hypotheses, not findings. Plasma-orb claims are treated as unsubstantiated. A third-party extract of 824 of his videos is a claim list, not proof. Edward C. Lin FOIA does not name MH370.

Blue Devil, MAGIC, Orion, BIG SAFARI — 2014 window

Briefing collages, 18 September 2026

Nic Moneypenny published investigation collages placing Blue Devil (including an egg-shaped airship), MAGIC, Aurora Orion, BIG SAFARI, Lockheed and DARPA in the same 2013–14 spending window as MH370, with Freescale’s last gyro presentation among the plates.

Edward C. Lin

VPU-2 / JTF 519 / PACFLT · court-martial · FOIA 2026

4ORBS reports February 2026 FOIA acquisition of court-martial records. Released records confirm service with VPU-2 / JTF 519 / PACFLT and a guilty plea to communicating classified national-defense information. Unreleased classified addendum holds the specific details. No released court document names MH370 or an MH370 satellite video.

Forensic evidence board — facts, capabilities, missing dossiers

Working chart of intersections · ten target records still outstanding

Cork-board reconstruction: Malaysian military radar and MH370 data on one side; QF-16 2013, UAV/UAS patents, JORN, Kadena P-8A/P-3C, Inmarsat SATCOM and Boeing range models on the other. The bottom row is the live request list — Boeing’s 4 March statement of work, sortie logs, Global Hawk, Pinckney/Kidd tracks, JORN tasking, SBIRS, Five Eyes correspondence, 9M-MRO avionics configuration.

Freescale gyros and the laser / directed-energy race

January 2025 briefing video: twenty Freescale employees on MH370; gyroscopic sensors; a US-led race with China and Russia on precision laser directed energy; later public silence on Freescale’s role; a prime contractor with Vanguard, BlackRock and State Street as large holders, and a reported 38% profit rise in 2014 after missile-defence grants.

Gorgon Stare documented at 2 fps, not 6 fps

OSD September 2013 comparison figure

Primary pre-MH370 report labels Gorgon Stare 2 fps versus 30 fps FMV. A claimed ~6 fps match to Increment 2 is not established, pending an Increment-2 specification.