The FBI and cybersecurity firms are warning that the prolific hacking group known as Scattered Spider is now targeting airlines and the transportation sector.
In a brief statement on Friday shared with TechCrunch, the FBI said it had “recently observed” cyberattacks resembling Scattered Spider to include the airline sector.
Executives from Google’s cybersecurity unit Mandiant and Palo Alto Networks’ security research division Unit 42 also said they have witnessed Scattered Spider cyberattacks targeting the aviation industry.
Scattered Spider is a collective of mostly English-speaking hackers, typically teenagers and young adults, who are financially motivated to steal and extort sensitive data from company networks. The hackers are also known for their deception tactics, which often rely on social engineering, phishing, and sometimes threats of violence toward company help desks and call centers to gain access to their networks, and sometimes deploy ransomware.
The FBI’s statement added that the hackers may target large corporations and their third-party IT providers, meaning “anyone in the airline ecosystem, including trusted vendors and contractors, could be at risk.”
The warning comes as at least two airlines have reported intrusions this month.
Hawaiian Airlines said late Thursday that it was working to secure its systems following a cyberattack. Canada’s second largest airline, WestJet, reported a cyberattack on June 13 that remains ongoing and unresolved. Media reports have linked the WestJet incident to Scattered Spider.
This fresh wave of Scattered Spider attacks comes soon after the cybercriminal gang targeted the U.K. retail sector and the insurance industry. The hackers have previously broken into hotel chains, casinos, and technology giants.
Updated with an additional statement from the FBI.