FBI Warns Scattered Spider Cyberattacks Target Airlines, Ecosystem

The FBI has issued a high-level warning that the hacker group Scattered Spider is increasingly targeting the civil aviation sector, including airlines and their supporting technology partners. Known for sophisticated social engineering tactics, this group uses deepfake technology to impersonate employees and contractors, bypassing multi-factor authentication to infiltrate systems and exfiltrate sensitive data. Recently, major airlines such as Hawaiian Airlines, WestJet, and Qantas have reported cyber incidents linked to these attacks, though no direct impacts on flight safety have been reported. Cybersecurity experts emphasize that defending against such attacks requires more than perimeter security, recommending robust protocols and comprehensive employee training to mitigate risks. The group has a pattern of focusing on specific industries and regions for several weeks before shifting targets, with recent campaigns hitting UK retailers, US insurers, and now the airline ecosystem during peak travel season. The FBI continues to collaborate with industry partners to address and mitigate these escalating threats.