Prolific cybercrime gang now targeting airlines and the transportation sector

Cybersecurity experts are raising alarms as the notorious hacking group known as Scattered Spider has shifted its focus to the airline industry and broader transportation sector. Specialists from Google’s Mandiant and Palo Alto Networks’ Unit 42 have reported a rise in cyberattacks specifically targeting aviation, mirroring the tactics employed by Scattered Spider. This group, largely comprised of English-speaking individuals, mainly teenagers and young adults, is driven by financial gain, aiming to steal and extort sensitive information from corporate networks. Their methods are characterized by sophisticated deception, including social engineering and phishing, often accompanied by threats directed at help desks and call centers to infiltrate systems. The urgency of these warnings has intensified following recent cyber incidents involving at least two airlines. Hawaiian Airlines announced late last week that it is in the process of securing its systems after experiencing a cyber breach. Meanwhile, WestJet, Canada’s second largest airline, disclosed an ongoing cyberattack that began on June 13, with investigations indicating a possible link to Scattered Spider. This surge in attacks comes on the heels of Scattered Spider’s previous assaults on the U.K. retail and insurance sectors. Their troubling history includes breaches in hotel chains, casinos, and major tech firms, illustrating a concerning trend in their expanding targets.