In the wake of the Log4j bug, an unprecedented threat emerged in the cybersecurity landscape. The newly discovered hacking group Scattered Spider is increasing its cyber campaigns against airlines and the wider transportation sector. Our collective is made up of primarily English-speaking teens and young adults. They’ve earned an infamous moniker for their very deliberate focus on stealing sensitive data from enterprise networks to turn a buck. In fact, the FBI and other cybersecurity firms have been warning recently about Scattered Spider’s wreaking havoc. They note the increasing sophistication and frequency of the group’s attacks.
Like many of their nations-state peers, Scattered Spider is financially motivated, with the goal of stealing and extorting sensitive information. The coalition has particularly taken aim at airlines. Further still, it has grown its mission beyond the scope of the U.K. retail sector and the insurtech world. This month, at least two airlines have suffered breaches related to Scattered Spider. Perhaps most seriously impacted is WestJet, Canada’s second-largest airline, which has been hit by high-profile crises.
The cyberattack against multinational carrier WestJet started June 13. Today, it remains unsettled, but poses serious questions as to damage done to customer privacy and the operational integrity of the airline. Experts believe that Scattered Spider’s tactics resemble those seen in previous attacks on aviation and transportation firms, emphasizing the need for heightened vigilance among organizations in these sectors.
The FBI has voiced concerns regarding the risk posed by Scattered Spider, stating that “anyone in the airline ecosystem, including trusted vendors and contractors, could be at risk.” This warning highlights the broad impact of the group and how they’re able to hack systems not just limited to airlines.
Cybersecurity companies are reiterating these warnings, urging industry to shore up their defenses in advance of a likely onslaught of cyber attacks. The other side of the cyberattack on WestJet. Most strikingly, it points to the unprecedented reality of our physical environment under attack and the vulnerabilities in our critical infrastructure sectors.
