FBI Confirms Scattered Spider Attacks on Airlines

The hacking group Scattered Spider, mainly comprised of young, English-speaking individuals, has intensified its cyberattacks on the North American aviation sector, with both the FBI and cybersecurity firms confirming a wave of breaches affecting US and Canadian airlines. Notable victims include Hawaiian Airlines and Canada’s WestJet, though authorities state that airline operations and safety were not compromised. The group employs advanced social engineering tactics, including phishing and manipulating help desks to bypass security controls like multi-factor authentication. Previous campaigns by Scattered Spider targeted insurance, retail, casinos, and technology sectors. Experts warn that third-party IT contractors and vendors, in addition to airlines, are now at heightened risk. The incidents have raised urgent concerns about the vulnerability of critical infrastructure during the busy summer travel season.