Ransomware gang claims it stole flydubai pilot files and Boeing code
The Everest ransomware gang has listed Dubai airline flydubai on its leak site, claiming it stole 4.36 gigabytes of data, Cybernews reported. If the claim is true, airline staff could face phishing and Boeing software code could be exposed. The gang says it has records on 2,862 employees and set a six-day deadline, but it has posted no proof.
A ransomware gang says it broke into flydubai, an airline based in Dubai. The Everest group listed the airline on its dark web leak site and claims to hold 4.36 gigabytes of stolen data, Cybernews reported Wednesday. The gang has not posted any samples to prove it, and the claim has not been independently confirmed.
Everest says the files include personal details for 2,862 employees across 17,053 records. The list covers pilots, cabin crew, trainers, dispatchers and ground staff, with records dating from 2009 to 2020. The gang claims names, employee IDs, job titles, work dates and training records.
The gang also claims a large set of pilot training material. That includes a full interactive course on the Boeing 737NG, plus lessons on winter flying, landing in fog and reading weather radar.
The most unusual claim involves Boeing. Everest says it has 2,827 files of computer code for Boeing's Performance Engineers Tool. Pilots and airlines use that software to work out takeoff weights, landing distances and fuel plans. More than 2,000 of the files are marked "Boeing Proprietary, Confidential, and/or Trade Secret," the gang claims. It also lists a confidential engine manual and an Airbus guide.
Everest set a six-day timer for flydubai to negotiate, a common pressure tactic. Cybernews said it had asked flydubai for comment. Insurance Business reported the airline had not responded publicly.
If the data is real, it could be used to trick airline workers with fake emails, a scam called phishing, which could lead to a wider breach. "Such information could be useful for competitors," a Cybernews researcher said.
The Boeing claim raises bigger questions, Insurance Business reported. If a manufacturer's secret code leaked through an airline customer, the legal fallout could reach Boeing, the airline and other users of the software.
Everest is a Russia-linked group active since at least 2020. It rents its tools to other hackers and sells access to hacked networks. Cybernews linked it to the Collins Aerospace attack that disrupted European airports, and to 2026 attacks on Frost Bank and Citizens Bank in the U.S.
What we know: Everest claims to hold flydubai staff data, training files and Boeing code.
What we don't: Whether the files are real, because no proof has been posted.
Where outlets agree Cybernews and Insurance Business both report Everest claims 4.36 gigabytes of flydubai data, including 2,862 employee records and Boeing software code, with a six-day deadline.
Where they differ The gang has posted no samples, and flydubai had not responded publicly, so the breach itself is still unconfirmed.