Resources
Resources
Official papers, films, Wikipedia and its citations, programmes, claims and open questions.
9 hits
ICAO
GADSS tracking standards after MH370
15-minute position reporting in normal flight; faster in distress. The regulatory aftershock.
ICAO GADSS tracking standards
Global Aeronautical Distress and Safety System · post-MH370
The regulatory aftershock: aircraft must report position at least every 15 minutes in normal flight, and more often in distress, so a 777 cannot again fly dark for six hours unnoticed.
Safety Investigation Report — MH370
Malaysian ICAO Annex 13 Team · 30 July 2018
The official accident report. Cause undetermined. Diversion likely from manual inputs; third-party intervention not excluded; 00:19 log-on treated as fuel exhaustion. No wreckage, no recorders.
Malaysian summary of possible MH370 debris
ICAO Annex 13 Team · updated 2017
Itemised list of wreckage recovered on western Indian Ocean coasts, with confirmation classes: confirmed, almost certain, highly likely, likely.
MyCERT: MH370-themed backdoor and fake-transcript spear-phish
MA-381 · 24 March 2014 · MA-386 · 18 April 2014
Confirmed public advisories, a different campaign from the 9 March official-network intrusion. 24 March: a Facebook-app lure dropping a backdoor with remote-control (C2) capability. 18 April: emails posing as an investigation team / ICAO portal item, password-protected archive, fake MH370 transcript, command-and-control. Aimed at organisations and the public, not shown to be the DCA/NSC/MAS breach.
Malaysia releases the safety investigation report
30 July 2018
The ICAO Annex 13 team, led by Kok Soo Chon, publishes hundreds of pages and cannot determine the cause. Diversion is judged likely from manual inputs. Third-party intervention is not excluded.
Malaysia Airlines declares the flight missing
23:24 UTC
The airline issues a public statement that MH370 is missing, hours after radio and radar contact were lost and while the aircraft is still exchanging satellite handshakes.
Surface search begins in the South China Sea
8 March 2014
Ships and aircraft search the Gulf of Thailand / South China Sea along the filed route — the wrong ocean for several days.
Two waves of MH370-themed cyberattacks
9 March official-network intrusion · March–April public malware lures

Working chart of two separate campaigns. Attack one: 9 March spear-phish of officials at the Department of Civil Aviation, National Security Council and Malaysia Airlines — CyberSecurity Malaysia’s public account, disclosed in August. Attack two: MyCERT alerts on 24 March and 18 April about MH370-themed backdoors and a fake investigation-transcript phish aimed more widely. Destination IP in China is not the same as a finding that Beijing ran the operation.
273 records in the file.