Russia 'tried to hack MH17 inquiry system'

October 23, 2015
Wreckage from Malaysia Airlines flight MH17 in Shaktarsk, Ukraine, on July 18, 2014
Wreckage from Malaysia Airlines flight MH17 in Shaktarsk, Ukraine, on July 18, 2014

Russian spies likely tried to hack into the Dutch Safety Board's computer systems to access a sensitive final report into the shooting down of flight MH17 over Ukraine, experts said Friday.

The cyberattacks were revealed by security experts Trend Micro which blamed a shadowy group dubbed Operation Pawn Storm, "an active economic and political cyber-espionage operation" that has targeted the White House and NATO in the past.

A spokeswoman for the Dutch board, which led the investigation into how Malaysia Airlines flight came down in July 2014 over war-torn Ukraine, confirmed the board had detected the attacks.

But there was "no evidence" that anyone "was successful in the attempt," spokeswoman Sara Vernooij told AFP.

She declined however to reveal "how and by whom" the attacks were carried out.

Trend Micro Friday blamed Operation Pawn Storm for a "cyber-espionage operation before and after" the publication on October 13 of the board's detailed report.

The "coordinated attack from several sides was launched to gain unauthorised access to sensitive material of the investigation conducted by Dutch, Malaysian, Australian, Belgian, and Ukrainian authorities," the Tokyo-based company said in a statement.

Trend Micro said there were "Russian spies behind Pawn Storm" which has been active since 2007 and is "an effort to attack major political targets, especially in the Ukraine".

The group, which has also targeted Russian dissidents and the Ukrainian government, could "be acting in the behest of parties invested in the Ukraine matter, or simply an outlier group acting on its own".

Malaysia Airlines flight MH17 leaves Schiphol Airport in the Netherlands, on July 17, 2014
Malaysia Airlines flight MH17 leaves Schiphol Airport in the Netherlands, on July 17, 2014

The Dutch-led investigators concluded that flight MH17 was shot down on by a Russian-made BUK missile fired from rebel-held territory in eastern Ukraine on July 17, 2014.

All 298 people on board, most of them Dutch nationals, were killed when the Boeing 777 was blown up en route from Amsterdam to Kuala Lumpur.

But the findings triggered protests from Moscow, which maintains the BUK missile was fired by the Ukrainian military, and not by pro-Russian separatists battling to breakaway from Kiev.

Trend Micro said that on September 28, a fake server was set up to mimic the Dutch Safety Board's safe file transfer protocol server, and on October 14 a false VPN access was also created.

On September 29, a fake Outlook web mail server was also established targeting one of the board's partners.

The aim was to "execute phishing attacks in order to collect credentials from the personnel of the Safety Board which could give Pawn Storm unauthorised access to the SFTP and VPN servers."

Pawn Storm is also believed to have been behind a cyberattack on France's TV5Monde television when people, claiming to represent the Islamic State group, shut down transmissions and placed jihadist messages on the station's website.

Explore further: Ban on Dutch flowers 'highly probable': Russian watchdog

Related Stories

Ukraine launches delayed polio vaccination drive

October 20, 2015

Ukraine reported Tuesday the start of a polio vaccination drive that began only after health groups accused Kiev of being critically late in responding to Europe's first outbreak since 2010.

Hackers target Ukraine's election website

October 26, 2014

Hackers attacked Ukraine's election commission website Saturday on the eve of parliamentary polls, officials said, but they denied Russian reports that the vote counting system itself had been put out of action.

Here's how you find out who shot down MH17

August 20, 2014

More than a month has passed since Malaysia Airlines flight MH17 crashed with the loss of all 298 lives on board. But despite the disturbances at the crash site near the small town of Grabovo, near Donetsk in eastern Ukraine, ...

Recommended for you

Paleontologists report world's biggest Tyrannosaurus rex

March 22, 2019

University of Alberta paleontologists have just reported the world's biggest Tyrannosaurus rex and the largest dinosaur skeleton ever found in Canada. The 13-metre-long T. rex, nicknamed "Scotty," lived in prehistoric Saskatchewan ...

NASA instruments image fireball over Bering Sea

March 22, 2019

On Dec. 18, 2018, a large "fireball—the term used for exceptionally bright meteors that are visible over a wide area—exploded about 16 miles (26 kilometers) above the Bering Sea. The explosion unleashed an estimated 173 ...

Coffee-based colloids for direct solar absorption

March 22, 2019

Solar energy is one of the most promising resources to help reduce fossil fuel consumption and mitigate greenhouse gas emissions to power a sustainable future. Devices presently in use to convert solar energy into thermal ...

1 comment

Adjust slider to filter visible comments by rank

Display comments: newest first

5 / 5 (1) Oct 24, 2015
Anyone who has actually read the report and not just the conclusion will know it contains more holes and errors than should ever be allowed in a official report..

It is a travesty to those who were murdered..

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.