FBI Issues US Airline Warning: What to Know
Newsweek AI is in beta. Translations may contain inaccuracies—please refer to the original content.
The FBI has issued a warning to the airline sector about the growing threat posed by the cybercriminal gang Scattered Spider, a group responsible for a series of sophisticated hacks against major U.S. companies and government agencies.
"The threat from Scattered Spider is ongoing and rapidly evolving," the FBI said in a statement, urging companies not to pay ransoms and to report intrusions promptly.
Newsweek reached out to the FBI via email for comment.
Why It Matters
The gang's recent focus on airlines has raised alarm due to the sector's significance to national security and public safety. Scattered Spider actors are suspected of infiltrating at least two major U.S. airlines in June, exploiting remote access tools and disabling multifactor authentication protocol, according to CNN.
The FBI stated the group often deploys ransomware after exfiltrating sensitive data.
What To Know
In a statement released on June 28, the FBI advised that large corporations in the aviation industry should be vigilant against cyberattacks from the group.
"The FBI has recently observed the cybercriminal group Scattered Spider expanding its targeting to include the airline sector. These actors rely on social engineering techniques, often impersonating employees or contractors to deceive IT help desks into granting access," the warning reads.
"These techniques frequently involve methods to bypass multi-factor authentication (MFA), such as convincing help desk services to add unauthorized MFA devices to compromised accounts."
An American Eagle jet takes off over Washington Reagan National Airport on March 23, 2025.
An American Eagle jet takes off over Washington Reagan National Airport on March 23, 2025.
Getty Images
The attackers have already shown an ability to remain inside compromised systems for extended periods. The group has previously targeted MGM Resorts International and Caesars Entertainment in high-profile breaches, demonstrating its ability to successfully strike across different industries.
After gaining access to internal services through social engineering, Scattered Spider monitors communication tools like Slack, Microsoft Teams, and email platforms to detect any signs that their activity has been discovered.
"They frequently join incident remediation and response calls and teleconferences, likely to identify how security teams are hunting them and proactively develop new avenues of intrusion," the FBI and the Cybersecurity and Infrastructure Security Agency said in the joint alert from November 2024.
What People Are Saying
The FBI, in a statement: "Once inside, Scattered Spider actors steal sensitive data for extortion and often deploy ransomware. The FBI is actively working with aviation and industry partners to address this activity and assist victims.
"Early reporting allows the FBI to engage promptly, share intelligence across the industry, and prevent further compromise. If you suspect your organization has been targeted, please contact your local FBI office."
What Happens Next
Officials urge companies in aviation, telecom, healthcare, and hospitality to evaluate their internal controls and report any suspected breaches. More indictments and potential sanctions could follow if U.S. authorities succeed in attributing specific actors or networks behind Scattered Spider.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
34 minutes ago
- Yahoo
Former FBI agent pardoned by Trump for Jan. 6 charges now serving at DOJ: Sources
A former FBI agent accused of egging on rioters to attack police during the Jan. 6, 2021 riot at the U.S. Capitol is now serving in the Justice Department as part of the so-called "Weaponization Working Group," sources familiar with the appointment confirmed to ABC News. Jared Wise was on trial when he was pardoned as part of President Donald Trump's sweeping series of pardons and commutations for nearly all of the more than 1,500 individuals charged in connection with the Capitol attack. According to sources, Wise is now serving in the department as an investigator and counselor to Ed Martin, the former interim D.C. U.S. Attorney, whose permanent nomination to the post was rejected by Republican senators concerned over his past vocal advocacy for Jan. 6 rioters and other controversial actions he took in Trump's first four months in office. MORE: Trump admin live updates: House takes up Senate's version of Trump's megabill The New York Times first reported Wise's appointment at the DOJ. Wise was charged in May 2023 and later indicted, with prosecutors pointing to videos showing him yelling "Kill 'em!" repeatedly as rioters attacked police outside of the Capitol building. He also allegedly entered the building for roughly nine minutes and then continued shouting at police. 'You guys are disgusting," Wise allegedly said in body camera footage recorded by law enforcement. "I'm former law enforcement. You're disgusting. You are the Nazi. You are the Gestapo. You can't see it. . . . Shame on you! Shame on you! Shame on you!' A Justice Department spokesperson declined to comment when asked about Wise's appointment. Martin also did not immediately respond to a request for comment.
Yahoo
2 hours ago
- Yahoo
FBI, DHS warn of lone wolf attacks on July 4 in NYC and San Francisco
NEW YORK — The FBI and Department of Homeland Security have said lone wolf attacks pose the biggest threats to July 4 celebrations this year in New York City and San Francisco. Intelligence bulletins sent out ahead of the holiday warn of copycat attacks and homegrown extremists, according to ABC News. 'We are concerned about the potential threat of copycat attacks inspired by the 2025 New Year's Day vehicle-ramming attack in New Orleans and continued messaging (from foreign terrorist organizations, or FTOs) calling for attacks against Western targets,' two such bulletins read. Officials warn that attackers in New York City and San Francisco could be motivated by a broad-range of grievances, with particular concern over outrage tied to the conflict between Israel and Hamas. 'Of these actors, U.S.-based violent extremists supporting FTOs and (domestic violent extremists) not linked to FTOs represent two of the most persistent threats,' the bulletins say. 'Lone offenders, in particular, remain a concern due to their ability to often avoid detection until operational and to inflict significant casualties.' The agencies specifically cite worries of 'malicious actors and violent extremists' entering July 4 event areas and First Amendment-protected demonstrations with 'weapons, chemical irritants, bodily fluids or other hazardous materials.' Drones could also pose a threat, authorities say. The warning comes weeks after an Egyptian man in Boulder, Colorado used Molotov cocktails to attack a march in support of Israeli hostages, leading to at least one death. A lone shooter killed seven and wounded dozens of others during a 2022 Fourth of July parade in Highland Park, Illinois, while the New Year's Day attack in New Orleans claimed the lives of 14 victims. _____
The Hill
3 hours ago
- The Hill
2 Chinese nationals charged with spying inside the US for Beijing, Justice Department says
WASHINGTON (AP) — Two Chinese nationals have been charged with spying inside the United States on behalf of Beijing, including by taking photographs of a naval base, coordinating a cash dead-drop and participating in efforts to recruit members of the military who they thought might be open to working for Chinese intelligence. The case, filed in federal court in San Francisco and unsealed Monday, is the latest Justice Department prosecution to target what officials say are persistent efforts by the Chinese government to secretly collect intelligence about American military capabilities — a practice laid bare in startling fashion two years ago with China's launching of a surveillance balloon that U.S. officials ultimately shot down over the coast of South Carolina. 'This case underscores the Chinese government's sustained and aggressive effort to infiltrate our military and undermine our national security from within,' Attorney General Pam Bondi said in a statement announcing the case. 'The Justice Department will not stand by while hostile nations embed spies in our country – we will expose foreign operatives, hold their agents to account, and protect the American people from covert threats to our national security.' Officials identified the defendants as Yuance Chen, 38, who arrived in the U.S. on a visa in 2015 and later became a lawful permanent resident, and Liren 'Ryan' Lai, 39, who prosecutors say lives in China but traveled to Texas this past spring and was part of an effort to supervise clandestine espionage operations on behalf of China's Ministry of State Security or MSS. The two were arrested on charges of secretly doing China's bidding without registering as foreign agents with the Justice Department, as required by law. It was not immediately clear if they had lawyers. Liu Pengyu, a spokesman for the Chinese Embassy in Washington, said he had no information about the specific case but asserted that allegations against China 'have no facts or evidence' and that 'the U.S. has never stopped its espionage activities against China.' According to an FBI affidavit filed in connection with the case, investigators believe Lai had been developing Chen to be a Chinese intelligence asset since at least mid-2021. Their activities, the FBI says, included coordinating on a dead-drop of at least $10,000 in cash to another person who was operating at the direction of the MSS. They also participated and arranged surveillance of a Navy recruiting station in California and Navy base in Washington state, including through photographs that Chen is accused of taking and that investigators believe were transmitted to Chinese intelligence. Authorities say Lai and Chen also discussed recruiting Navy employees to work for China, with Chen at one point obtaining names, hometowns and programs of recent recruits. Many listed China as their hometown and investigators believe the information was sent to China, the FBI affidavit says. The affidavit recounts conversations aimed at assessing whether individual Navy employees would make for good recruits for Chinese intelligence. In one instance, the FBI said, Chen sent Lai the name of a Navy employee and wrote: 'I found out. His mother is Chinese. His father and mother did not get along and the mother was given custody when he was 8 years old. That is why he uses his mother's last name.' The case is one in a series concerning Chinese intelligence-gathering, sometimes related to the U.S. military. In August 2023, for instance, two Navy sailors were charged with providing sensitive military information to China, including details on wartime exercises, naval operations and critical technical material. 'Adverse foreign intelligence services like the PRC's Ministry of State Security dedicate years to recruiting individuals and cultivating them as intelligence assets to do their bidding within the United States,' Assistant Attorney General John Eisenberg, the head of the Justice Department's National Security Division, said in a statement. _____ Associated Press writer Didi Tang in Washington contributed to this report.
