A mysterious hacker group, identified as Scattered Spider by Google’s Mandiant Consulting, is suspected of targeting WestJet in a recent incident.
Google’s chief technology officer Charles Carmakal stated that the company has seen multiple incidents resembling the operations of UNC3944 or Scattered Spider. He warned that organizations in the airline and transportation sector should take immediate action to “harden systems” against sophisticated social engineering attacks.
Palo Alto Networks also detected evidence of hackers targeting aviation companies, advising organizations to be on high alert for suspicious MFA reset requests.
Scattered Spider’s tactics include exploiting known security vulnerabilities and using social engineering tactics. Despite efforts by US law enforcement to curb the group’s activity, arrests made in the fall have not yielded lasting results.
Source: https://www.axios.com/2025/06/27/aviation-transportation-sector-cyberattacks-scattered-spider