FBI Warns: Notorious Hacker Group Sets Sights on Aviation Industry – What You Need to Know

Even tech experts aren’t safe from hackers. A recent FBI warning highlights a group called Scattered Spider that’s targeting the airline industry by tricking IT help desks.

This group hit the news in 2023 for breaching MGM Resorts and Caesars Entertainment in quick succession. They use clever social engineering tricks to impersonate employees and gain access to internal systems, often bypassing multi-factor authentication (MFA). According to the FBI, they target large organizations and their IT service providers, posing a threat to everyone in the airline ecosystem, including trusted vendors.

Once inside the systems, Scattered Spider steals sensitive data and often uses ransomware for extortion. Fortunately, the FBI has noted that these incidents do not impact airline safety.

Charles Carmakal, CTO at Mandiant (a cybersecurity firm owned by Google), stated on LinkedIn that the firm is seeing multiple cases resembling the actions of Scattered Spider in the airline sector. He suggests immediate improvements to help desk identity checks to prevent unauthorized access, especially when adding new phone numbers or resetting passwords.

Unit 42, a cybersecurity research team within Palo Alto Networks, has also reported incidents related to Scattered Spider in aviation. Sam Rubin, a senior VP at Unit 42, warned organizations to remain vigilant against targeted social engineering attacks and suspicious MFA reset requests.

Recently, WestJet reported a cybersecurity incident affecting its internal systems and app, limiting access for some users. A spokesperson noted they are making progress in resolving the issue. Similarly, Hawaiian Airlines confirmed a “cybersecurity event” impacting some IT systems, but assured the public that flights continued normally.

Despite these incidents, Southwest Airlines claimed their systems remain secure. Cybersecurity in the airline industry is increasingly critical as attacks become more sophisticated. As of late 2023, about 60% of businesses report feeling vulnerable to cyber threats, according to a recent survey by a leading cybersecurity firm.

These events remind us that robust cybersecurity measures are essential to protect sensitive information in all sectors, especially aviation. As the digital landscape evolves, so does the need for vigilance and proactive security strategies.

For more information on cybersecurity risks, visit the FBI’s Cyber Crime page here.

Source link

aviation industry,notorious hacker group,fbi,business insider,scattered spider,employee,airline ecosystem,google,cybersecurity firm,linkedin,westjet,mfa,access,contractor,account