Malware Potentially Implicated in 2008 Fatal Plane Crash in Spain

By Kevin Coleman
Defense Tech Cyber Warfare Analyst

Investigators looking into the crash of Spanair Flight 5022 at Madrid International Airport on August 20, 2008, killing 154, found that the airline’s central computer system used to monitor technical problems in its fleet was infected with malware, according to this news report. The central computer system should have warned the airline that Flight 5022, an MD-82 aircraft, was having repeat mechanical problems.

The plane’s onboard computer that should have alerted the crew by an audible alarm that the flaps and slats were retracted – NOT in the proper position for takeoff – failed to do so, multiple times. The U.S. National Transportation Safety Board preliminary investigation found that no audible alarm had been heard.

“The accident on take-off happened after pilots had abandoned an earlier take-off attempt and a day after two other reported problems on board. If the airlines’ central computer was working properly a take-off after three warnings would not have been allowed, thereby averting the tragedy.”

There are so many unanswered questions about this incident and what it will mean for transportation safety in general and specifically how it will impact the airlines industry.

11 Comments on "Malware Potentially Implicated in 2008 Fatal Plane Crash in Spain"

  1. I just learned that the Judge conducting the investigation has summoned COMPUTER EXPERTS and ordered the company to make data about the computer system available and the Judge expects the final report to be completed by December of this year.

  2. To be clear, is this article implying that the aircraft's computer had malware or the maintenance ground software had malware, or both?

  3. TrustButVerify | August 23, 2010 at 11:52 am | Reply

    Feh. "Malware may have been a contributory cause of a fatal Spanair crash that killed 154 people two years ago." per the source article; methinks someone is going for the better headline, rather than the more accurate one. I'm more interested in the mechanic who okay'd the airframe for flight.

  4. The article incorrectly lists the date as "August 20, 1988" rather than "August 20, 2008."

  5. At this point there are many more questions then there are answers. I can't wait and see the report due this December. How could the redundant onboard system both miss the flaps not being in the proper position and sound the alarm. As it was stated before – BOTH computers would have had to failed to detect the flaps incorrect position. Really Really interesting problem set.

  6. They shouldn't be downloading porn before doing maintenance checks

  7. If malware can do this… imagine what a country's cyber army can do to the USA who has absolutely no cyber defense (that works) or have the backbone enough to retaliate both in and out of cyberspace. The pentagon gets hacked how many times a day for the past couple of years just for us to sit around, talk about the issue and do nothing?

  8. According to certain information this Spanair MD-82 stopped its first departure attempt and returned close to the terminal because of an overheating indication in its ram air temperature probe. The technicians inspecting the aircraft pulled a circuit breaker to isolate this fault. It is THEORIZED that this circuit breaker was not returned to its proper position and that it neutralized the aircraft's take off warning system (TOWS). The TOWS would have provided audio warning that the aircraft's flaps and slats were not in the optimal position for take off and no such aural warning was sounded. The aircraft, filled to capacity with fuel and passengers for a flight to the Canary Islands, attempted a take off with an incorrect flaps-slats configuration and entered a stall that led to the activation of the stick shaker stall warning at a small altitude from the runway. The aircraft fell back on the runway, veered off it, and crashed down a ravine close to the end of the runway where it suffered a catastrophic fire. A similar take off stall had caused a Northwest Airlines DC-9 accident at the Detroit Airport in the more distant past.


    The investigating Spanish judge has asked the technicians who checked the crashed Spanair MD-82 aircraft after the first aborted departure attempt to provide statements. Apparently, criminal liability attaches after such aircraft accidents in Spain as it happens in other European countries as well.

  10. Well, I hope they get to truth of the matter. Considering interconnected so many computer systems are, perhaps it will get the industries who are involved with this sort of equipment to put better or physical safeguards to prevent Malware from invading such critical systems.

  11. The MD82 is a very old aircraft… the computer systems on this are very very dated. I wouldn't get up in arms about this crash.

    Nobody even designs aircraft electronics like they did in that aircraft!

    This is a problem with an aged system… no real need to worry. To be honest, it's a poor mechanics that are likely to blame here. In reality this aircraft is so old, pretty much every problem under the sun has occured in it's lifetime… so there is no reason for people not to know how to fix issues with it. Poor training or lack of experience is more likely on these old types as old mechanics retire etc.

Leave a comment

Your email address will not be published.