View source for Vietnamese airports hackings

{{Short description|Cyberattacks on Vietnam Airlines in 2016}}
{{Infobox event
| title    = Vietnamese airports hackings
| image    =
| image_size =
| image_alt=
| caption  =Snapshot of a hacked Flight information screens at a Vietnam airport
| native_name      =
| native_name_lang =
| english_name     =
| time     =
| duration =
| date     = {{start date|2016|07|29}}
| venue    =
| location = 
| type     = Cyber-attack
| theme    =
| cause    = 
| first_reporter   =
| budget   =
| patron   = <!-- or |patrons= -->
| organisers       = <!-- or |organizers= -->
| participants     = Allegedly Chinese Hackergoup 1937CN
| outcome  = 100 flights delay, <br />confidential data of 411.000  members of Vietnam Airlines' frequent fliers club, Golden Lotus
| arrests  = 
| suspects = 
| accused  =
| convicted=
| charges  = 
| trial    =
| verdict  =
| convictions      =
| sentence =
| publication_bans =
| litigation       =
| awards   =
| url      =
| blank_label      = Targets 
| blank_data= Vietnam Airlines<br>Tan Son Nhat International Airport<br>Noi Bai International Airport, Da Nang International Airport<br>Phu Quoc International Airport<br>Vietnam Football Federation<br>National Economics University in Vietnam
}}

On 29 July 2016, a group suspected coming from China launched hacker attacks on the website of Vietnam Airlines with client information leaked and on flight information screens at Vietnam's 2 biggest airports, Tan Son Nhat International Airport and Noi Bai International Airport, posting derogatory messages against Vietnam and the {{wipe|Philippines}} in their territorial row against {{wipe|China}} in the South China Sea.<ref>[https://www.nytimes.com/aponline/2016/07/29/world/asia/ap-as-vietnam-hackers.html?_r=0 Flight Info Screens at Vietnam's 2 Major Airports Hacked], nytimes, 29.7.2016</ref><ref>[http://e.vnexpress.net/news/news/cyber-terrorists-attack-flight-info-screens-at-vietnam-s-2-major-airports-3444504.html Cyber-terrorists attack flight info screens at Vietnam's 2 major airports], vnexpress, 29.7.2016</ref><ref>[https://www.theguardian.com/world/2016/jul/29/flight-information-screens-in-two-vietnam-airports-hacked Flight information screens in two Vietnam airports hacked], theguardian, 29.7.2016</ref><ref>[http://www.dw.com/en/hackers-target-flight-info-screens-at-vietnams-airports/a-19437977 Hackers target flight info screens at Vietnam's airports], dw,  29.7.2016</ref>

==Background==
On 12 July 2016, the [[Finance:Permanent Court of Arbitration|Permanent Court of Arbitration]] ruled in favor of the Philippines against China over an arbitration case concerning the disputes in the South China Sea;<ref name=":1">{{Cite web|url=https://pca-cpa.org/en/news/pca-press-release-the-south-china-sea-arbitration-the-republic-of-the-philippines-v-the-peoples-republic-of-china/|title=PCA Press Release: The South China Sea Arbitration (The Republic of the Philippines v. The People's Republic of China) {{!}} PCA-CPA|website=pca-cpa.org|access-date=2016-07-12}}</ref><ref name=":2">{{Cite news|url=https://www.nytimes.com/2016/07/13/world/asia/south-china-sea-hague-ruling-philippines.html|title=Tribunal Rejects Beijing's Claims in South China Sea|last=Perlez|first=Jane|date=2016-07-12|newspaper=The New York Times|issn=0362-4331|access-date=2016-07-12}}</ref> in its major ruling, the tribunal ruled that China has "no historical rights" based on the "nine-dash line" map.<ref name=":1" /><ref name=":2" /> Within hours of the Permanent Court of Arbitration's unanimous rebuke of China's territorial claims in the South China Sea last week, at least 68 national and local government websites in the Philippines were knocked offline in a massive distributed denial of service (DDoS) attack.<ref>[https://thediplomat.com/2016/07/chinas-secret-weapon-in-the-south-china-sea-cyber-attacks/ China's Secret Weapon in the South China Sea: Cyber Attacks], thediplomat,  22.7.2016</ref>

This hack comes days after a row involving a Chinese tourist at one of the hacked airports, Tan Son Nhat International Airport. A Chinese visitor complained, that her passport was handed back with obscenities written on the page that contains a map including China's "nine-dash line", that marks China's claim to territories in the South China Sea.<ref>[https://www.bbc.com/news/world-asia-36927674 South China Sea: Vietnam airport screens hacked], bbc,  29.7.2016</ref>

==Incidents==
According to the Civil Aviation Administration of Vietnam, at 13h46 on 29 July the IT-systems of VietJet, Vietnam Airlines to do the flight check-ins at the Tan Son Nhat International Airport were attacked and had to stop working.   At 16h07',  A team of self-proclaimed Chinese Hackers attacked flight information screens at Noi Bai International Airport, posting notices that state media said criticized the Philippines and Vietnam and their claims in the South China Sea.,<ref name=vne730>[http://vnexpress.net/tin-tuc/thoi-su/giao-thong/hon-100-chuyen-bay-bi-cham-vi-tin-tac-tan-cong-san-bay-3444702.html Hơn 100 chuyến bay bị chậm vì tin tặc tấn công sân bay], vnexpress, 30.7.2016</ref><ref>[https://www.reuters.com/article/us-vietnam-hacking-idUSKCN1091YL Hackers hit Vietnam airports with South China Sea messages], reuters, 29.7.2016</ref> The hackers also took control of the speaker system at Noi Bai airport for a few minutes, during which the speakers broadcast a male voice distorting Viet Nam's claims over the East Sea in English.<ref name=vnn729>[http://vietnamnews.vn/society/300416/chinese-hackers-attack-vns-airports-and-vietnam-airlines-website.html#Ig25kqbfYBUl7BT6.99 Chinese hackers attack VN’s airports and Vietnam Airlines’ website], vietnamnews, 29.7.2016</ref> The check-ins system of Vietnam Airlines there was also attacked and had to switch to manual procedure completion, which lead to flight delays.<ref>[http://tuoitrenews.vn/society/36243/alleged-chinese-hackers-compromise-hanoi-airport-system-vietnam-airlines-website Alleged Chinese hackers compromise Vietnam's airports, airline website], tuoitrenews, 29.7.2016</ref> altogether, Noi Bai airport has 30 flight, and Tan Son Nhat more than 60 flight delayed from 15 til more than an hour, affect about 2.000 passengers.<ref name=vne730/>

The official website of Vietnam Airlines, vietnamairlines.com, was also hacked by the same group at about 4pm the same day. The website page was replaced by the same picture that appeared on the airports’ screens. The website was back to normal at 18.30pm, however, the airlines’ customer database was stolen and made public on the internet, according to a press release from Vietnam Airlines. The airlines advised its members to change their account passwords as soon as the network system is recovered.<ref name=vnn729/>

Another 2 webpages were also compromised, are the webpage from  Vietnam Football Federation on the same day <ref>[http://sohoa.vnexpress.net/tin-tuc/doi-song-so/bao-mat/website-cua-lien-doan-bong-da-viet-nam-bi-tan-cong-3444564.html Website của Liên đoàn bóng đá Việt Nam bị tấn công] Minh Minh, VnExpress 29/7/2016 | 23:15 GMT+7</ref> and from National Economics University (Vietnam) the next day.<ref name="Bbc" >[http://www.bbc.com/vietnamese/vietnam/2016/07/160730_china_vn_hack Hacker TQ 'phủ nhận cáo buộc tấn công VN'] BBC 30 tháng 7 2016</ref>

On next day, 50% of the computers can check in again, but the flight information screens are still off at Noi Bai airport. The speaker system is also still not working again. At Tan Son Nhat airport the situation is similar to Noi Bai with no flight information screens and no speaker system.<ref name=vne730/>

==Perpetrators==
The hackers claimed to be the 1937CN from China, which is one of the biggest hacker groups in the country and has a history of hacking Viet Nam's and the Philippines’ websites in 2013 and 2015, respectively.<ref name=vnn729/>

==References==
{{Reflist}}

{{Hacking in the 2010s}}

[[Category:Cyberattacks]]
[[Category:Data breaches]]

{{Sourceattribution|Vietnamese airports hackings}}