FBI Warns Scattered Spider Cyberattacks Target US Airlines, Industry Systems

The FBI has issued multiple warnings about the hacker group Scattered Spider targeting the U.S. airline industry, especially as the busy Fourth of July travel period approaches. This group, composed mainly of teenagers and young adults, employs social engineering tactics such as impersonating employees or contractors to deceive IT help desks, often bypassing multi-factor authentication to gain access to airline systems. Scattered Spider has already breached at least two major airlines, including Hawaiian Airlines and WestJet, stealing sensitive data for extortion and deploying ransomware, though these attacks have not disrupted flight operations. The FBI is collaborating with aviation and industry partners to respond quickly, share intelligence, and prevent further compromises, emphasizing the need for airlines to strengthen internal controls and promptly report suspicious activity. Experts highlight the vulnerability of airlines due to their reliance on interconnected digital systems across reservation, flight management, and communication platforms. This ongoing threat underscores the growing cybersecurity risks to critical infrastructure posed by sophisticated social engineering attacks.