FBI and Cybersecurity Experts Alert on Hacking Group Targeting Airlines and Transportation Industry

The FBI and cybersecurity specialists are raising alarms as the infamous hacking group Scattered Spider shifts its focus towards the airline and transportation sectors.

In a brief announcement shared with TechCrunch on Friday, the FBI stated it had “recently observed” cyberattacks resembling those linked to Scattered Spider, particularly impacting the airline industry.

Experts from Google’s cybersecurity division, Mandiant, and the research team Unit 42 at Palo Alto Networks have also confirmed the detection of Scattered Spider assaults aimed at the aviation sector.

Composed mainly of English-speaking hackers, often teenagers and young adults, Scattered Spider is motivated by financial gain, seeking to steal and extort sensitive data from corporate networks. The group is recognized for its use of deceptive methods, frequently resorting to social engineering, phishing, and sometimes threatening company help desks and call centers to gain access to networks, occasionally deploying ransomware.

The FBI’s statement added that these hackers might target large corporations alongside their third-party IT service providers, cautioning that “anyone in the airline ecosystem, including trusted vendors and contractors, may be at significant risk.”

This alert follows reports of at least two airlines experiencing security breaches this month.

Hawaiian Airlines revealed on Thursday that it was taking measures to secure its systems following a cyberattack. WestJet, Canada’s second-largest airline, has reported an ongoing cyberattack since June 13, which is yet to be resolved. Media reports suggest a connection between the WestJet incident and Scattered Spider.

This latest wave of Scattered Spider attacks follows recent incursions into the U.K. retail sector and the insurance industry. The hackers have also previously breached hotel chains, casinos, and major tech firms.

Updated with further details from the FBI.