FBI Issues Cybersecurity Alert to Aviation Sector Over Scattered Spider Threat

The English-speaking cybercriminal group is suspected of targeting two major airlines in June 2025.

On June 28, 2025, the FBI warned of recent cyberattacks on the aviation sector that closely resemble operations conducted by Scattered Spider, a known English-speaking cybercriminal group. In June, two airlines — Canada’s WestJet and the U.S.-based Hawaiian Airlines — both reported severe disruptions following a cyber incident.

The tactics used are consistent with Scattered Spider’s signature approach, the same group believed to be behind the high-profile ransomware attack on retailer Marks & Spencer earlier this year. “Anyone within the airline ecosystem — including trusted vendors and subcontractors — may be at risk,” the FBI stated.

Cybersecurity firms have corroborated the agency’s concerns. Charles Carmakal, Chief Technology Officer at Mandiant, urged the aviation industry to act immediately, stressing the group’s proficiency in social engineering techniques. Sam Rubin, an executive at Unit 42 (Palo Alto Networks), echoed the call for heightened vigilance.