FBI Warns of Hacking Group Targeting Airlines & Transportation

Scattered Spider Targets Airlines and Transportation

The Federal Bureau of Investigation, alongside multiple cybersecurity companies, has issued alerts regarding increased cyber activity by the hacking group Scattered Spider. Their focus is now reportedly shifting towards airlines and the broader transportation sector.

Recent Observations and Industry Impact

The FBI confirmed, in a statement to TechCrunch released on Friday, that they have observed cyberattacks consistent with Scattered Spider’s tactics impacting the airline industry.

Security experts at Mandiant, Google’s cybersecurity division, and Unit 42, the security research arm of Palo Alto Networks, have independently corroborated these findings. They too have detected Scattered Spider attacks directed at aviation organizations.

Understanding Scattered Spider

Scattered Spider is characterized as a group comprised primarily of young, English-speaking hackers. Their motivations are largely financial, centering on the theft and extortion of confidential data from corporate networks.

These hackers frequently employ deceptive strategies. These include social engineering, phishing attempts, and, in some instances, direct threats of violence against help desks and call centers. Such tactics are used to infiltrate networks and potentially deploy ransomware.

Broadening Scope of Potential Victims

The FBI’s warning emphasizes that the risk extends beyond major airlines themselves. Any entity within the airline ecosystem – encompassing trusted vendors and contractors – could potentially become a target.

Recent Airline Intrusions

At least two airlines have recently disclosed experiencing cyber intrusions this month.

Hawaiian Airlines announced on Thursday that it is actively working to reinforce its system security following a recent cyberattack. WestJet, Canada’s second-largest airline, reported a cyberattack on June 13th, which remains unresolved as of this writing. Reports suggest a connection between the WestJet incident and Scattered Spider.

Expanding Attack Vectors

This latest series of attacks follows previous campaigns by Scattered Spider targeting the retail sector in the U.K. and the insurance industry. The group has a history of successful breaches at hotel chains, casinos, and major technology companies.

This article has been updated to include an additional statement from the FBI.