Australia has launched an urgent investigation into the alleged Australian links of the Flydubai co-pilot accused of attacking the captain during a flight bound for Israel.
The investigation adds a new international dimension to the disturbing Flydubai cockpit incident. Australian federal and state authorities are examining the suspect’s history in the country, including his time studying in Melbourne.
However, one crucial point needs to be made clear: there is currently no verified evidence that the incident was directed by a “deep-state sleeper cell.” Authorities are investigating possible links, motives and radicalisation, but a coordinated sleeper-cell operation has not been established.
The investigation follows the dramatic events aboard Flydubai flight FZ1073. The aircraft was travelling from Dubai toward Tel Aviv when the co-pilot allegedly attacked the captain inside the cockpit.
The incident caused the aircraft to lose thousands of metres of altitude in a short period. Passengers and crew eventually intervened, while reserve pilots helped regain control of the aircraft.
The plane ultimately landed safely in Saudi Arabia.
Australia launches counterterrorism investigation
The Australian Federal Police has confirmed that Australian authorities are investigating the suspect’s links to the country.
The Victorian Joint Counter Terrorism Team is handling the Australian inquiry. The team includes the Australian Federal Police, Victoria Police and the Australian Security Intelligence Organisation, known as ASIO.
That combination makes the investigation significant.
Authorities are not simply examining an aviation incident. They are also examining whether anything connected to the suspect’s time in Australia could help explain the alleged attack.
According to ABC reporting, the suspect received an Australian student visa in 2014 and studied in Australia between 2015 and 2017. His visa was later cancelled in 2019 because he was no longer enrolled in a course, rather than because of a character-based cancellation.
Investigators are expected to examine his movements, contacts, online activity and associations during his time in Australia.
The central question is straightforward:
Was the suspect radicalised while he was in Australia, or did his alleged extremist views develop elsewhere?
At this stage, authorities have not publicly provided a definitive answer.
What happened aboard Flydubai flight FZ1073?
The incident occurred on a Flydubai flight travelling from Dubai to Israel.
According to authorities and multiple reports, the co-pilot allegedly attacked the captain inside the cockpit using an emergency crash axe and attempted to take control of the aircraft. The United Arab Emirates prosecutor general has described the incident as a terrorist attack.
The situation rapidly became critical.
Flight-tracking information showed the aircraft undergoing an extremely steep descent. ABC reported that the jet plunged nearly 14,000 feet in less than 30 seconds.
Other flight-tracking analyses have reported different altitude measurements depending on the point used to calculate the descent. Regardless of the exact figure, the aircraft experienced a dramatic loss of altitude.
The captain was injured.
The co-pilot was then reportedly subdued after passengers and crew members entered the cockpit area.
Two reserve pilots travelling aboard the aircraft helped take control of the plane.
The aircraft diverted to Tabuk in northwestern Saudi Arabia, where it landed safely.
The co-pilot was detained and later transferred to the United Arab Emirates.
Who is the alleged attacker?
Multiple reports have identified the suspect as an Omani national named Hamam or Hammam al-Hammami.
However, authorities have not consistently released his identity publicly, and some details surrounding his background remain under investigation.
Reports say the suspect had previously been barred from flying in Oman amid concerns about alleged extremist views. Those claims remain part of the broader investigation into his background.
The allegations have raised major questions about aviation security.
If a pilot has previously faced restrictions connected to extremist concerns, investigators will naturally examine how he later obtained employment in another aviation system.
That does not automatically establish negligence.
Instead, investigators must determine what information was available to employers and regulators, when it was available and whether appropriate screening procedures were followed.
Why Australia matters to the investigation
The Australian connection is now one of the most important investigative threads.
The suspect reportedly spent several years studying in Melbourne.
According to ABC, he entered Australia on a student visa and studied there from 2015 to 2017. His visa was cancelled in 2019 because he was no longer enrolled in his course.
Australian counterterrorism investigators are now examining whether his time in the country has any relevance to the Flydubai attack.
That could involve several areas.
Investigators could examine his educational history, travel records, known associates, online activity and any intelligence previously collected about him.
They may also seek to establish whether he came into contact with extremist networks.
Importantly, an investigation into someone’s links to a country does not mean that country was responsible for their later actions.
It also does not prove that the suspect belonged to a terrorist organisation.
Those conclusions require evidence.
Reports of extremist websites and radical mosques
The Australian investigation follows reports that the suspect may have visited radical mosques and extremist websites while living in Australia.
Reuters reported that the Financial Times had cited people familiar with the investigation regarding those allegations. Reuters also said it could not independently verify the report at the time.
This distinction is important.
Online searches, visits to particular websites or attendance at a religious institution can become investigative leads. However, they do not by themselves prove membership in a terrorist organisation or participation in a conspiracy.
Investigators will need to determine whether there was evidence of actual recruitment, operational planning, communications or financial support.
Until that evidence is made public, claims about an organised sleeper cell remain speculative.
Is there evidence of a “deep-state sleeper cell”?
This is one of the most controversial questions surrounding the story.
At present, there is no publicly verified evidence establishing that a deep-state sleeper cell directed the alleged attack.
The phrase “deep state” is often used politically to describe alleged hidden networks inside governments or institutions. In this case, credible reporting has not established such a network.
The investigation is examining possible links and motives.
That is different from proving a coordinated conspiracy.
In fact, CBS News reported on October 4 that early Israeli investigators believed the alleged attack was likely a lone-wolf operation, although the investigation remained ongoing and other possibilities were still being examined.
Therefore, the most accurate description at this stage is that investigators are examining whether anyone else was involved.
They have not publicly demonstrated that anyone else was.
Israel examines whether the suspect acted alone
Israeli officials have also been examining the suspect’s motives and background.
Prime Minister Benjamin Netanyahu previously said investigators were looking into whether the co-pilot had acted under someone else’s direction.
That question is critical.
A lone attacker and an organised terrorist cell present very different security challenges.
If the suspect acted alone, investigators would focus heavily on radicalisation, personal grievances, mental state and access to aviation systems.
If investigators discover evidence of external direction, the case could become significantly broader.
It could involve communications, financial transactions, travel records and additional suspects.
For now, neither scenario should be treated as conclusively established.
The cockpit security questions
The Flydubai incident has also revived a difficult question for the aviation industry:
How can airlines prevent a trusted pilot from becoming an internal security threat?
Commercial aviation relies heavily on trust.
Pilots receive extensive training and undergo medical and professional checks. They also have access to extremely sensitive areas of an aircraft.
Yet aviation experts have long acknowledged that screening systems cannot predict every future action.
The Financial Times reported that the Flydubai incident has renewed debate about psychological assessments, pilot vetting and cockpit security.
The challenge is particularly difficult because malicious intent can be concealed.
A person can pass professional examinations while later developing extremist beliefs or experiencing personal circumstances that investigators could not have predicted.
That makes prevention extremely complicated.
Could the incident change pilot screening?
It could.
Aviation authorities may examine whether existing screening systems need additional safeguards.
Potential areas of review could include:
- Background checks
- International employment histories
- Security intelligence sharing
- Pilot medical assessments
- Reporting mechanisms
- Access to cockpit controls
- Procedures for dealing with pilot-to-pilot attacks
- International information-sharing systems
However, any new rules would need to balance security with privacy and fairness.
A system that treats every unusual belief or personal difficulty as evidence of terrorism could create serious problems.
The goal is not simply to identify people who are different.
The goal is to identify credible security risks before they reach a cockpit.
The role of Australia’s intelligence agencies
ASIO’s participation in the Australian investigation highlights the seriousness of the case.
ASIO is Australia’s domestic security intelligence agency. Its involvement means investigators can examine whether the suspect previously came to the attention of Australian security authorities.
Reuters reported that Australian intelligence services were believed to have held a file on the individual, although other details remain under investigation. Reuters also cautioned that some reporting about his alleged radicalisation could not be independently verified.
That raises another major question:
If intelligence existed before the incident, what did it contain?
And more importantly, did it include information relevant to aviation security?
Those questions may take considerable time to answer.
What investigators are likely to examine next
The investigation could expand across several countries.
Australian investigators are examining the suspect’s time in Australia.
UAE authorities are investigating the attack itself.
Saudi authorities were involved because the aircraft landed at Tabuk after the emergency.
Israeli authorities are examining the suspected terrorist motive because the aircraft was travelling toward Israel and carried many Israeli passengers.
Omani authorities may also have relevant information about the suspect’s earlier aviation history.
This makes the investigation highly international.
Investigators will likely compare records from each country to create a timeline of the suspect’s life, employment and movements.
A terrifying aviation security warning
The Flydubai incident demonstrates how quickly a cockpit emergency can become a major aviation crisis.
The aircraft was carrying 174 people, according to ABC News.
A cockpit attack is particularly dangerous because the pilots are responsible for maintaining flight control, navigation and communication.
If one pilot becomes incapacitated, the other pilot must respond immediately.
If the attacker is the second pilot, the situation becomes even more complicated.
In this case, the presence of reserve pilots aboard the aircraft and the intervention of passengers and crew became critical factors.
Their actions helped prevent a much greater disaster.
What remains unknown
Despite the growing investigation, several questions remain unanswered.
Investigators have not publicly established exactly why the co-pilot allegedly attacked the captain.
They have not publicly established whether he belonged to a terrorist organisation.
They have not established whether anyone ordered the attack.
They have not established whether an Australian-based network was involved.
And there is currently no verified evidence demonstrating the existence of a “deep-state sleeper cell” behind the incident.
Those questions should remain open until investigators release evidence.
The investigation is still developing.
Why the Australian probe could become significant
The Australian investigation could provide important answers.
If investigators find evidence of radicalisation in Australia, it could lead to a broader review of how extremist warning signs are detected.
If they find no meaningful connection, that would also be significant.
It could demonstrate that the suspect’s alleged radicalisation occurred elsewhere.
Either way, the investigation should help separate verified facts from speculation.
That distinction matters because terrorism investigations can quickly become overwhelmed by unverified claims online.
The most important evidence will come from investigators, intelligence agencies, court documents and official findings.
Flydubai investigation enters a critical phase
The Flydubai co-pilot investigation has now expanded beyond the aircraft itself.
Australian authorities are examining the suspect’s links to the country. UAE authorities are investigating the alleged terrorist attack. Israeli officials are examining motive and whether anyone else was involved.
Meanwhile, aviation experts are asking whether existing pilot screening procedures are sufficient to detect rare but potentially catastrophic threats.
The case is therefore about more than one flight.
It could influence future discussions about pilot vetting, cockpit security, international intelligence sharing and aviation safety.
For now, however, the evidence points to an alleged attack that investigators are still trying to understand.
Claims of a coordinated “deep-state sleeper cell” remain unproven.
The strongest confirmed development is that Australia’s counterterrorism authorities are investigating the suspect’s Australian connections. That investigation could eventually reveal whether his years in Melbourne were relevant to the alleged attack—or whether the connection is ultimately incidental.
Until investigators publish more evidence, caution is essential.
The Flydubai incident was already extraordinary.
The unanswered questions surrounding the suspect’s background could make the investigation one of the most closely watched aviation security cases of 2026.
FAQs
What happened on Flydubai flight FZ1073?
The co-pilot allegedly attacked the captain inside the cockpit and attempted to take control of the aircraft. The aircraft lost a significant amount of altitude before passengers, crew and reserve pilots helped restore control. The plane eventually landed safely in Saudi Arabia.
Why is Australia investigating the Flydubai co-pilot?
Australian authorities are investigating the suspect’s links to Australia because he reportedly studied in Melbourne between 2015 and 2017. The Victorian Joint Counter Terrorism Team is examining whether his time in Australia has any connection to the alleged attack.
Was the Flydubai co-pilot radicalised in Australia?
That has not been established. Authorities are investigating whether radicalisation occurred during his time in Australia, but publicly available evidence does not yet provide a definitive answer.
Was the Flydubai incident a terrorist attack?
The UAE prosecutor general has described the alleged cockpit attack as a terrorist attack. The investigation into the suspect’s motive and possible connections is continuing.
Was the co-pilot part of a sleeper cell?
There is currently no verified public evidence proving that he was part of a sleeper cell. Early Israeli reporting cited by CBS suggested investigators believed the alleged attack was likely carried out by a lone actor, although the investigation remains ongoing.
What is known about the suspect’s Australian visa?
ABC News reported that the suspect received a student visa in 2014 and studied in Australia from 2015 to 2017. His visa was cancelled in 2019 because he was no longer enrolled in a course, rather than because of a character-based cancellation.
What happens next in the Flydubai investigation?
Investigators are expected to examine the suspect’s background, possible extremist connections, communications, travel history and motives. Australian, Emirati, Israeli and potentially other authorities may contribute to the investigation.
Could aviation security rules change?
The incident could lead regulators and airlines to review pilot screening, psychological assessments, background checks and cockpit security procedures. Aviation experts have already renewed debate about how airlines can identify rare cases involving potentially dangerous pilots.
About the Author
