Scattered Spider hackers are now hitting airlines and transportation. The FBI and top cybersecurity firms just flagged the move.
The FBI said it “recently observed” Scattered Spider-style attacks targeting airlines. Google’s Mandiant and Palo Alto Networks’ Unit 42 confirmed they’ve tracked similar strikes against aviation.
This group is mostly English-speaking teens and young adults. They use phishing, social engineering, and even threats of violence to break in. Ransomware and stealing sensitive data follow.
The FBI warns anyone tied to airlines—big companies, vendors, contractors—could be at risk.
At least two airlines are already affected. Hawaiian Airlines admitted to a cyberattack on Thursday. Canada’s WestJet has been battling an ongoing hack since June 13. Media links WestJet’s incident to Scattered Spider.
This surge follows recent hits on UK retail and insurance. Scattered Spider has hit hotels, casinos, and tech firms before.
FBI added:
“The hackers may target large corporations and their third-party IT providers, meaning ‘anyone in the airline ecosystem, including trusted vendors and contractors, could be at risk.’”
Sources: Hawaiian Airlines statement, WestJet advisory, Mandiant LinkedIn, Unit 42 LinkedIn