FBI and Cybersecurity Specialists Caution About Hacking Group Aiming at Airlines and Transportation Industry
Cybersecurity experts and the FBI are raising concerns as the infamous hacking group Scattered Spider targets the airline and transportation sectors.
In a succinct statement shared with TechCrunch on Friday, the FBI noted that it had “recently observed” cyberattacks similar to those linked to Scattered Spider, particularly impacting the airline industry.
Specialists from Google’s cybersecurity unit, Mandiant, along with the Unit 42 research team at Palo Alto Networks, have verified the detection of Scattered Spider’s attacks on the aviation sector.
Composed mainly of English-speaking hackers—often teenagers and young adults—Scattered Spider is motivated by financial gain, seeking to steal and extort sensitive information from corporate networks. Known for using deceptive strategies, the group frequently employs social engineering, phishing, and, at times, threatens company help desks and call centers to breach networks, occasionally utilizing ransomware.
The FBI’s statement highlighted that these hackers may target both large corporations and their third-party IT service providers, cautioning that “any entity within the airline ecosystem, including trusted vendors and contractors, may be at significant risk.”
This alert comes following reports of at least two airlines experiencing security breaches this month.
Hawaiian Airlines announced on Thursday that it is taking steps to improve its system security after a cyberattack. Meanwhile, WestJet, the second-largest airline in Canada, has reported an ongoing cyberattack since June 13, which has yet to be resolved. Media sources suggest a connection between the WestJet incident and Scattered Spider.
This latest surge of attacks by Scattered Spider follows recent breaches in the U.K. retail sector and the insurance industry. The hackers have also previously compromised hotel chains, casinos, and leading tech firms.
Updated with further information from the FBI.
