Resources

CyberSecurity Malaysia

National cyber agency · publicly described the 9 March intrusion in August 2014

Confirmed. Agency under the then Ministry of Science, Technology and Innovation. CEO Amirudin Abdul Wahab is the named source for the 9 March spear-phish of investigation officials. Digital forensics support to the affected departments; work with police and Interpol.

Investigation networks spear-phished the day after MH370 vanished

CyberSecurity Malaysia · ~30 PCs · disclosed 20 August 2014

Confirmed as CSM’s public account. On 9 March, officials at the Department of Civil Aviation, the National Security Council and Malaysia Airlines were sent malware disguised as a news article that the aircraft had been found. About thirty computers were infected. Outbound mail carrying confidential files, including meeting minutes and classified documents, some related to MH370, was traced to an IP in China. CSM shut the machines down and asked Chinese providers to block the traffic. Police and Interpol were involved. What exactly was stolen is still unpublished.

Can the Motorola and mangosteen cargo be rebuilt at carton level?

Working-log Q28–Q35: airway bill 232-10677085, Motorola SKUs, whether radios/transmitters were present, CG effects, and why the Motorola consignment was not X-rayed.

Two stolen European passports

Italian and Austrian documents · two Iranian travellers

Yes — two Iranian men were on board. They travelled on stolen European passports (Italian and Austrian), not Iranian documents. The official investigation treated them as likely asylum seekers and did not adopt a terrorism finding.

Two waves of MH370-themed cyberattacks

9 March official-network intrusion · March–April public malware lures

Working chart of two separate campaigns. Attack one: 9 March spear-phish of officials at the Department of Civil Aviation, National Security Council and Malaysia Airlines — CyberSecurity Malaysia’s public account, disclosed in August. Attack two: MyCERT alerts on 24 March and 18 April about MH370-themed backdoors and a fake investigation-transcript phish aimed more widely. Destination IP in China is not the same as a finding that Beijing ran the operation.

USS Pinckney (DDG 91) diverted from South China Sea training to search

7th Fleet · 8 March 2014 · two MH-60R embarked

Confirmed. Pinckney was already at sea in the South China Sea on a training and maritime-security task, then ordered toward Vietnam’s southern coast after MH370 was missing. Helicopters flew search sorties from 9 March. Pre-search combat-system logs are not public.

The radar story and the 9 March cyberattack

Working chart · tracks, delays, and a spear-phish of the investigation

Two panels. Left: civilian secondary, Malaysian military primary, Thai paint disclosed ten days later, and the 12-hour lag before the civilian rescue centre was told. Right: one day after the loss, officials on the investigation were hit with a spear-phish that CyberSecurity Malaysia later said stole classified material toward an IP in China. Presence of a hack is confirmed as that agency’s public account. What was in the take — and whether it included radar — is still open.

They May As Well Have Been Flying the Plane

MH370 song, February 2026

Nic Moneypenny’s MH370 song: who signed off the project; FOIA walls; families still waiting. Dedicated to the search for what is still held back as national security.

USAF PB2020 — MAGIC/Orion continued after 2014

PE 0305205F · Congressional adds FY2015–FY2018

MAGIC/Orion did not fade from the budget after 2014. Adds: $20m FY2015, $5m FY2016, $50m FY2017, $40m FY2018, on top of $19m FY2012 and $50m FY2013. Post-2016 money was for airworthiness, cybersecurity, interoperability and mission capability toward a deployable Block 1 Orion.

MH370 Daily Research — working papers

18 September 2026

Working ISR report, source ledger and master chronology gathered the same day, with a cited-URL set pointing at contemporary MAGIC, Orion and Gorgon Stare reporting.

US military presence in theatre, 7–9 March 2014

Public-source board · confirmed search assets vs records still needed

Working chart of publicly documented US assets around MH370: USS Pinckney already in the South China Sea and diverted to search on 8 March; a Kadena P-3C announced the same day; USS Kidd joined. Guam RQ-4, Diego Garcia sensors, EP-3E, RC-135 and exact 7–9 March sortie lists remain open. Presence is not the same as tracking 9M-MRO.