FBI, cybersecurity firms say a prolific hacking crew is now targeting airlines and the transportation sector

The FBI, alongside prominent cybersecurity firms, has issued a stark warning regarding the activities of the notorious hacking group, Scattered Spider, which is now focusing its efforts on airlines and the broader transportation industry. In a statement released on Friday, the FBI revealed that it has recently detected cyberattacks that appear to be linked to Scattered Spider's operations, particularly within the airline sector. Executives from Mandiant, Google’s cybersecurity arm, and Unit 42, Palo Alto Networks' security research team, corroborated these findings, noting a rise in cyberattacks attributed to Scattered Spider specifically targeting the aviation field. This group, primarily composed of English-speaking individuals—many of whom are teenagers and young adults—are driven by financial gain, seeking to steal and extort sensitive information from corporate networks. Scattered Spider is notorious for employing elaborate deception tactics, which include social engineering, phishing schemes, and at times, threats of violence directed at company help desks and call centers to infiltrate networks. The group has also been known to deploy ransomware as part of its attacks. The FBI's advisory emphasized that large corporations and their third-party IT service providers are potential targets, indicating that "anyone within the airline ecosystem, including trusted vendors and contractors, could be in jeopardy." This warning comes in the wake of reported intrusions at a minimum of two airlines this month. Hawaiian Airlines announced late Thursday that it was taking steps to secure its systems following a cyberattack. Meanwhile, WestJet, Canada’s second-largest airline, reported an ongoing cyber incident dating back to June 13, which has been linked to Scattered Spider. This uptick in attacks from Scattered Spider follows their recent focus on the U.K. retail sector and the insurance industry. Their previous exploits have included breaches at hotel chains, casinos, and major technology firms, raising concerns about their expanding reach and tactics. The FBI's statement was later updated with additional insights, underscoring the serious nature of this emerging threat.