Vietnamese airports hackings

Vietnamese airports hackings

Date	July 29, 2016 (2016-07-29)
Type	Cyber-attack
Participants	Allegedly Chinese Hackergoup 1937CN
Outcome	100 flights delay, confidential data of 411.000 members of Vietnam Airlines' frequent fliers club, Golden Lotus
Targets	Vietnam Airlines Tan Son Nhat International Airport Noi Bai International Airport, Da Nang International Airport Phu Quoc International Airport Vietnam Football Federation National Economics University in Vietnam

On 29 July 2016, a group suspected coming from China launched hacker attacks on the website of Vietnam Airlines with client information leaked and on flight information screens at Vietnam's 2 biggest airports, Tan Son Nhat International Airport and Noi Bai International Airport, posting derogatory messages against Vietnam and the Philippines in their territorial row against China in the South China Sea. ^{[1] [2] [3] [4]}

Background

On 12 July 2016, the Permanent Court of Arbitration ruled in favor of the Philippines against China over an arbitration case concerning the disputes in the South China Sea; ^{[5] [6]} in its major ruling, the tribunal ruled that China has "no historical rights" based on the "nine-dash line" map. ^{[5] [6]} Within hours of the Permanent Court of Arbitration's unanimous rebuke of China's territorial claims in the South China Sea last week, at least 68 national and local government websites in the Philippines were knocked offline in a massive distributed denial of service (DDoS) attack. ^[7]

This hack comes days after a row involving a Chinese tourist at one of the hacked airports, Tan Son Nhat International Airport. A Chinese visitor complained, that her passport was handed back with obscenities written on the page that contains a map including China's "nine-dash line", that marks China's claim to territories in the South China Sea. ^[8]

Incidents

According to the Civil Aviation Administration of Vietnam, at 13h46 on 29 July the IT-systems of VietJet, Vietnam Airlines to do the flight check-ins at the Tan Son Nhat International Airport were attacked and had to stop working. At 16h07', A team of self-proclaimed Chinese Hackers attacked flight information screens at Noi Bai International Airport, posting notices that state media said criticized the Philippines and Vietnam and their claims in the South China Sea., ^{[9] [10]} The hackers also took control of the speaker system at Noi Bai airport for a few minutes, during which the speakers broadcast a male voice distorting Viet Nam's claims over the East Sea in English. ^[11] The check-ins system of Vietnam Airlines there was also attacked and had to switch to manual procedure completion, which lead to flight delays. ^[12] altogether, Noi Bai airport has 30 flight, and Tan Son Nhat more than 60 flight delayed from 15 til more than an hour, affect about 2.000 passengers. ^[9]

The official website of Vietnam Airlines, vietnamairlines.com, was also hacked by the same group at about 4pm the same day. The website page was replaced by the same picture that appeared on the airports’ screens. The website was back to normal at 18.30pm, however, the airlines’ customer database was stolen and made public on the internet, according to a press release from Vietnam Airlines. The airlines advised its members to change their account passwords as soon as the network system is recovered. ^[11]

Another 2 webpages were also compromised, are the webpage from Vietnam Football Federation on the same day ^[13] and from National Economics University (Vietnam) the next day. ^[14]

On next day, 50% of the computers can check in again, but the flight information screens are still off at Noi Bai airport. The speaker system is also still not working again. At Tan Son Nhat airport the situation is similar to Noi Bai with no flight information screens and no speaker system. ^[9]

Perpetrators

The hackers claimed to be the 1937CN from China, which is one of the biggest hacker groups in the country and has a history of hacking Viet Nam's and the Philippines’ websites in 2013 and 2015, respectively. ^[11]

References

1. Flight Info Screens at Vietnam's 2 Major Airports Hacked, nytimes, 29.7.2016
2. Cyber-terrorists attack flight info screens at Vietnam's 2 major airports, vnexpress, 29.7.2016
3. Flight information screens in two Vietnam airports hacked, theguardian, 29.7.2016
4. Hackers target flight info screens at Vietnam's airports, dw, 29.7.2016
5. "PCA Press Release: The South China Sea Arbitration (The Republic of the Philippines v. The People's Republic of China) | PCA-CPA". pca-cpa.org. Retrieved 2016-07-12.
6. Perlez, Jane (2016-07-12). "Tribunal Rejects Beijing's Claims in South China Sea". The New York Times. ISSN   0362-4331 . Retrieved 2016-07-12.
7. China's Secret Weapon in the South China Sea: Cyber Attacks, thediplomat, 22.7.2016
8. South China Sea: Vietnam airport screens hacked, bbc, 29.7.2016
9. Hơn 100 chuyến bay bị chậm vì tin tặc tấn công sân bay, vnexpress, 30.7.2016
10. Hackers hit Vietnam airports with South China Sea messages, reuters, 29.7.2016
11. Chinese hackers attack VN’s airports and Vietnam Airlines’ website, vietnamnews, 29.7.2016
12. Alleged Chinese hackers compromise Vietnam's airports, airline website, tuoitrenews, 29.7.2016
13. Website của Liên đoàn bóng đá Việt Nam bị tấn công Minh Minh, VnExpress 29/7/2016 | 23:15 GMT+7
14. Hacker TQ 'phủ nhận cáo buộc tấn công VN' BBC 30 tháng 7 2016