flydubai probe: Co-pilot worked for 3 airlines before alleged attack plot

The 29-year-old Omani co-pilot of flydubai flight FZ1073, which had taken off from Dubai for Tel Aviv on September 30, 2026, is under investigation for allegedly planning a terrorist attack, UAE Attorney-General Dr Hamad Saif Al Shamsi revealed. According to the investigation, the suspect had previously worked for Oman Air from 2020 to 2024 and Royal Air Maroc for a few months in early 2025 before joining flydubai in January 2026.

The Public Prosecution's probe into the incident has scrutinized the suspect's professional background, alleged extremist influences, preparations and recruitment checks. Prosecutors allege that the co-pilot had commenced a premeditated terrorist plot to seize control of the aircraft and use it for a suicide attack against the passenger terminal at Ben Gurion Airport in Tel Aviv.

The suspect's professional history included three airlines: Oman Air, Royal Air Maroc, and flydubai. His employment with Oman Air lasted from 2020 to 2024, while he joined Royal Air Maroc in early 2025 and worked with the airline for several months. flydubai was his employer from January 2026, nearly eight months prior to the incident.

The investigation examined the suspect's employment history as part of the wider inquiry into the alleged plot. Recruitment checks did not uncover any warning signs regarding his extremist views or intentions to carry out a terrorist plot. The investigation found that the suspect's ideological shift towards extremism first became apparent in 2017 when he was studying in Australia.

He was reportedly influenced by extremist literature and online content glorifying terrorist organizations and suicide attacks, which eventually developed into ideas advocating violence and terrorism. The suspect's alleged connections to extremist influences were drawn from his confession, which stated that he drew inspiration from the September 11, 2001, attacks in the United States.

He allegedly planned the attack using an aircraft, linking his ideas to his career choice in aviation. The suspect reportedly mentioned attending a mosque affiliated with RMIT in Melbourne, where he became acquainted with individuals from a center known as "My Centre." This center was allegedly managed by a Lebanese man named "Abu Hamza" and reportedly had support from an association linked to the Muslim Brotherhood.

The suspect also informed investigators that he took two earlier flights to Tel Aviv to familiarize himself with the route and airport. These preparations were noted in the Attorney-General's report on the investigation. Alleged preparations for the attack included psychological and physical preparations, such as increased exposure to terrorist material and training in boxing with a private coach.

Investigators also discovered that the suspect had made two earlier flights to Tel Aviv to gain familiarity with the route and airport. According to the Attorney-General, the suspect initiated the alleged plot during his third flight to Tel Aviv on September 30, 2026. During the attack, the co-pilot allegedly assaulted the captain with an emergency axe inside the cockpit.

A pilot on board noticed unusual movements at the cockpit door and, together with a cabin crew member and passengers, restrained the suspect and helped the injured captain. The replacement flight crew regained control of the aircraft and successfully diverted it to Tabuk Airport in Saudi Arabia for a safe landing. A forensic medical report confirmed recent head injuries consistent with an assault involving an implement matching the characteristics of an emergency axe.

These findings aligned with statements from the captain, the return-flight pilot, the co-pilot, and other crew members. The suspect claimed he acted alone in planning and executing the attack. The Public Prosecution has heard the captain's statement, along with those of the return-flight pilot, the co-pilot, and crew members. The investigation remains ongoing, with authorities continuing to examine evidence, review recordings and technical reports, and investigate potential accomplices or additional connections.

Further findings will be announced as the investigation progresses, subject to the ongoing nature of the case.