Malware indicated as Madrid air tragedy cause
The tragic Madrid air crash, which took the lives of 154 people, could have been partly caused by malware, a report has claimed.


Malware could have played a significant part in the horrific 2008 Madrid air disaster that left 154 people dead, according to a Spanish newspaper.
An internal report by the plane's airline, Spanair, discovered a central computer which registered technical problems was not functioning correctly due to an infection, El Pais said.
This meant technical problems with the aircraft had not been picked up, the report claimed.
Other problems, which would not have been due to malware contamination, also went unnoticed, such as the plane taking off with its flaps and slats retracted.
However, if the Trojan infection had not been present, the flight may never have attempted to take off in the first place and the tragedy could have been avoided, the report suggested.
"We cannot confirm whether malware played a part, nor do we know which particular malware it could have been," Mikko Hypponen, F-Secure chief research officer, said.
"However, over the years, we have seen real-world infrastructure affected by computer problems. In most cases, this has been just a side effect; the malware behind the problem wasn't trying to take systems down, it just did," he added in a blog post.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Malware, if it was present in the airline systems, was likely to have just been a contributory factor that led to the tragedy, not the main cause, according to Sophos senior technology consultant Graham Cluley said.
"It's very probable that there will be found to be other contributing factors to what was a horrific accident beyond the malware infection by Trojan horses," Cluley added in a blog.
"However, next time someone tries to convince you that the people who write malware aren't really doing anyone any serious harm - remember this case."
The final report from crash investigators is due to be presented in December.
Tom Brewster is currently an associate editor at Forbes and an award-winning journalist who covers cyber security, surveillance, and privacy. Starting his career at ITPro as a staff writer and working up to a senior staff writer role, Tom has been covering the tech industry for more than ten years and is considered one of the leading journalists in his specialism.
He is a proud alum of the University of Sheffield where he secured an undergraduate degree in English Literature before undertaking a certification from General Assembly in web development.
-
Why Microsoft thinks diversity will keep security workers relevant in the age of agentic AI
News Improved AI skills and a greater focus on ensuring agents are secure at point of deployment will be key for staying ahead of attackers
By Rory Bathgate
-
Microsoft: get used to working with AI-powered "digital colleagues"
News Tech giant's report suggests we should get ready to work with AI, revealing future trends for the workplace
By Nicole Kobie
-
96% of SMBs are missing critical cybersecurity skills – here's why
News The skills shortage hits SMBs worse as they often suffer from a lack of budget and resources
By George Fitzmaurice
-
Sophos Firewall Virtual review: Affordable network protection for those that like it virtualized
Reviews Extreme network security that's cheaper than a hardware appliance and just as easy to deploy
By Dave Mitchell
-
MSPs are struggling with cyber security skills shortages
News A shortage of tools and difficulties keeping pace with solutions were also ranked as key issues for MSPs
By George Fitzmaurice
-
Nearly 70 software vendors sign up to CISA’s cyber resilience program
News Major software manufacturers pledge to a voluntary framework aimed at boosting cyber resilience of customers across the US
By Solomon Klappholz
-
Sophos and Tenable team up to launch new managed risk service
News The new fully managed service aims to help organizations manage and protect external attack surfaces
By Daniel Todd
-
Ransomware groups are using media coverage to coerce victims into paying
News Threat actors are starting to see the benefits of a more sophisticated media strategy for extracting ransoms
By Solomon Klappholz
-
Shrinking cyber attack “dwell times” highlight growing war of attrition with threat actors
News While teams are becoming more proficient at detecting threats, attackers are augmenting their strategies
By Ross Kelly
-
Cyber security in the retail sector
Whitepapers Retailers need to ensure their business operations and internal data aren't breached
By ITPro