Cybersecurity firms are warning that the prolific hacking group known as Scattered Spider is now targeting airlines and the transportation sector.
Executives from Google’s cybersecurity unit Mandiant and Palo Alto Networks’ security research division Unit 42 say they have observed cyberattacks targeting the aviation industry resembling Scattered Spider.
Scattered Spider is a collective of mostly English-speaking hackers, typically teenagers and young adults, who are financially motivated to steal and extort sensitive data from company networks. The hackers are also known for their deception tactics, which often rely on social engineering, phishing, and sometimes threats of violence toward company help desks and call centers to gain access to their networks.
The warning comes as at least two airlines have reported intrusions this month.
Hawaiian Airlines said late Thursday that it was working to secure its systems following a cyberattack. Canada’s second largest airline, WestJet, reported a cyberattack on June 13 that remains ongoing and unresolved. Media reports have linked the WestJet incident to Scattered Spider.
This fresh wave of Scattered Spider attacks comes soon after the cybercriminal gang targeted the U.K. retail sector and the insurance industry. The hackers have previously broken into hotel chains, casinos, and technology giants.