Beta The Briev beta is out. Free on iPhone via TestFlight — install it in under a minute.

Join the beta ↗
Briev
Live
Crime & Justice
CROSS-SPECTRUMBROAD COVERAGE

FlyDubai faces ransomware threat days after cockpit axe attack

On a FlyDubai flight from Dubai to Tel Aviv, co‑pilot Hammam al‑Hammami used a cockpit emergency axe to strike the captain, wounding him and prompting passengers and crew to subdue the attacker before the plane landed safely in Saudi Arabia. The incident has sparked scrutiny of the airline's rapid post‑pandemic hiring, with observers noting that lowered flight‑hour requirements and aggressive recruitment may have outpaced pilot vetting.

Investigators are probing how al‑Hammami, listed as a security risk in Oman, passed security checks and were assigned to the flight. Days after the attack, the Russian‑linked Everest ransomware group announced it had breached FlyDubai’s systems and threatened to expose data covering 2,862 employees, pilot training documents and Boeing software code, giving the airline six days to begin negotiations. No data samples have been released, and officials have not linked the cyber breach to the earlier hijack attempt.

How this was covered

  • Right-leaning outlets covered this 6h later
  • Coverage peaked at 18 outlets in a single hour

Why it matters

The combined safety and cybersecurity threats could affect passenger confidence and expose sensitive airline and aviation information.

How the sides frame it

LOW AGREEMENT

Left-leaning coverage highlights the pilot’s personal struggle and the terror-style nature of the assault, center coverage presents a straightforward factual account of the attack and investigation, while right-leaning coverage focuses on the co-pilot’s earlier dismissal as a security risk.

LEFT

Frames the incident as a terror-style attack and emphasizes the captain’s heroic fight and his communication with leaders.

CENTER

Frames the event as a factual security incident, noting the use of an emergency axe, the safe landing, and the launch of a joint investigation.

RIGHT

Frames the story around the co-pilot’s prior safety concerns, portraying the assault as linked to earlier security warnings.

The left emphasises

  • the assault was a "terror-style" attack
  • the captain fought to keep the aircraft aloft and later spoke from his hospital bed
  • the pilot spoke with India’s prime minister Narendra Modi about the incident

The right emphasises

  • the co-pilot had been suspended by Oman Air as a security risk
  • extremist material was found in his possession while he was a trainee
  • the dismissal w

How this story developed

  1. Sep 30 Netanyahu hails Indian pilot who thwarted alleged flydubai sabotage
  2. Oct 2 President Trump said investigators are working to determine whether Iran is linked to the co‑pilot.
  3. Oct 2 A UAE official called the mid-air incident on flydubai flight FZ1073 a terrorist act and praised Indian pilot Smit Machchhar for safely landing the aircraft after a co-pilot attack.
  4. Oct 2 Modi praised Machchhar for averting disaster.
  5. Oct 3 Co‑pilot identified as Hamam al Hamami, an Omani national previously barred by Oman over extremist concerns.
  6. Oct 3 UAE prosecutors have classified the March incident on Flydubai flight between Dubai and Tel Aviv as a terrorist attack after a co-pilot used an emergency axe against the pilot.
  7. Oct 3 The weapon used in the attack was identified as a small axe.
  8. Oct 3 The aircraft was diverted to Tabuk, Saudi Arabia, where it landed safely.
  9. Oct 3 Specialised investigators are analysing physical and digital evidence to determine the co‑pilot's motives and identify any potential ties to external extremist organisations.
  10. Oct 5 Al‑Hammami was transferred to UAE authorities for interrogation.
  11. Oct 6 President Trump warned of harsh retaliation against Iran if involvement is proven.
  12. Oct 6 Interrogations revealed the co‑pilot said his motive was revenge for Gaza and that he had earlier been prohibited from flying due to extremist concerns.
  13. Oct 8 The Everest ransomware group announced a breach of FlyDubai’s systems and issued an extortion demand.
Get the beta ↗