Hackers Now Boarding: Scattered Spider Graduates From Casinos to Crashing Airlines

The FBI and cybersecurity firms have issued a joint warning that the hacker group Scattered Spider is now targeting airlines and the transportation sector.

Cybersecurity experts at Google’s Mandiant and Palo Alto Networks’ Unit 42 confirmed the group’s increased activity in the aviation industry.

Scattered Spider, made up mostly of young English-speaking hackers, is infamous for stealing sensitive data and extorting companies using phishing and threats.

The group’s tactics include impersonating employees, manipulating IT help desks, and in some cases, deploying ransomware.

The FBI said the group’s new targets may include large airlines as well as third-party IT vendors and contractors in the transportation supply chain.

At least two airlines have been affected this month, with WestJet reporting an unresolved cyberattack linked to the group.

Hawaiian Airlines also disclosed it is responding to a cyber intrusion and working to secure its systems.

The airline hacks follow the group’s recent attacks on the U.K. retail sector and insurance industry.

Scattered Spider has previously breached major hotel chains, casinos, and tech companies, proving once again that no sector is off-limits when there’s ransom money on the table.