Urgent Alert: Cybercriminals Launch Major Attack on US Airlines – What You Need to Know

A cybercrime group is now focusing on the aviation industry. They breached several airlines’ computer networks in the U.S. and Canada this month. This alarming news comes from the FBI and cybersecurity experts.

While flight safety hasn’t been compromised, major airlines are on high alert. The group behind the attacks, known as “Scattered Spider,” is notorious for extorting companies and creating chaos.

As summer travel ramps up, this marks the third major U.S. industry hit in a short span. Before the airlines, insurance and retail sectors faced similar cyberattacks.

These hackers target not just airlines, but also their contractors. Once they gain access, they steal sensitive data for ransom. According to the FBI, “Once inside a victim’s network, Scattered Spider actors deploy ransomware.” They continuously monitor potential victims, putting everyone in the aviation ecosystem at risk.

Airlines like Hawaiian and WestJet are currently evaluating the damage from recent attacks. Though they’ve reported no operational disruptions so far, experts are concerned more airlines may soon reveal they were affected.

In fact, WestJet faced issues just two weeks ago, with reports of a “cybersecurity incident” affecting customer services.

Aakin Patel, a former chief information security officer, points out that the lack of operational impact suggests strong cybersecurity measures. This has allowed airlines to continue services despite threats.

Jeffery Troy, president of the Aviation ISAC, highlights an increased alertness among industry members due to the connection between cyberattacks and geopolitics. “We’re seeing attacks from financially motivated hackers,” he noted.

Cybersecurity firms like Google-owned Mandiant are stepping in to help. They’re working to ensure airlines secure their customer service operations, which are prime targets for cybercriminals.

A common tactic used by Scattered Spider is impersonating employees or customers to gain access to corporate networks. “Airlines rely heavily on call centers,” says Patel. “This makes them vulnerable.”

Scattered Spider first gained notoriety in September 2023 when they were behind major hacks on Las Vegas casinos, including MGM Resorts and Caesars Entertainment. Their methods have been consistent, targeting one sector at a time: after casinos, they turned their attention to the aviation industry, following a breach at Aflac, an insurance giant.

Charles Carmakal, a chief technology officer at Mandiant, affirmed that multiple incidents in the aviation sector resemble Scattered Spider’s style. The need for stronger cybersecurity is clear as the aviation industry braces for more threats.

In a world increasingly dependent on digital infrastructure, staying proactive against cyber threats is more crucial than ever.



Source link