FBI warns of cybercriminal group targeting airline industry

ALABAMA (WHNT) — The Federal Bureau of Investigation said it has observed an online group possibly targeting airlines.

The FBI announced Friday that it has observed a cybercriminal group called Scattered Spider expanding its target reach to include the airline industry.

The report says the group tries to rely on social engineering techniques by impersonating employees or contractors to deceive IT department help desks into granting them access to programs.

“These techniques frequently involve methods to bypass multi-factor authentication (MFA), such as convincing help desk services to add unauthorized MFA devices to compromised accounts. They target large corporations and their third-party IT providers, which means anyone in the airline ecosystem, including trusted vendors and contractors, could be at risk,” the FBI wrote.

Once inside, the FBI said Scattered Spider actors steal data for extortion and often deploy ransomware. The FBI said it is working with aviation and industry partners to address the activity and help anyone who has fallen victim to this attack.

“Early reporting allows the FBI to engage promptly, share intelligence across the industry, and prevent further compromise. If you suspect your organization has been targeted, please contact your local FBI office,” the FBI said.