Cybersecurity experts and the FBI are issuing a warning: the notorious hacking group known as Scattered Spider is now targeting airlines and the broader transportation sector. This emerging threat has raised concerns across the industry as cyberattacks increasingly threaten the aviation ecosystem.
Recently, the FBI disclosed that it has observed cyberattacks resembling those attributed to Scattered Spider impacting airline companies. Experts from leading cybersecurity firms, including Google’s Mandiant and Palo Alto Networks’ Unit 42, have also reported seeing the group’s activities within the aviation industry.
So, who is Scattered Spider? This group comprises mostly young, English-speaking hackers motivated by financial gain. They often use social engineering tricks, phishing scams, and even threats of violence against help desks and call centers to infiltrate networks. Once inside, they may deploy ransomware or steal sensitive data, causing significant disruptions.
The FBI warns that these hackers might target large airlines and their third-party IT vendors, meaning any company within the airline’s supply chain—trusted vendors and contractors alike—could be at risk. As these threats escalate, airlines are on high alert.
In recent weeks, at least two airlines have reported security breaches. Hawaiian Airlines announced it was working to secure its systems after experiencing a cyberattack, while Canada’s WestJet revealed an ongoing cyber intrusion that remains unresolved. Media reports have linked the WestJet breach to Scattered Spider’s activities.
This surge in attacks follows a series of high-profile assaults against other sectors, including retail, insurance, hotels, casinos, and tech giants. The rise of Scattered Spider’s targeting of transportation highlights the growing reach and sophistication of cybercriminal groups.
Stay vigilant—airlines and transportation companies must reinforce their cybersecurity defenses to protect against these evolving threats.
