Scattered Spider Hacking Spree Continues With Airline Sector Attacks

A surge of attacks attributed to the criminal collective Scattered Spider (also tracked as UNC3944 / Muddle Libra) is targeting airlines and their third-party IT vendors using sophisticated social engineering — including help-desk impersonation, MFA coercion, and deepfakes — to gain access, steal sensitive data for extortion, and deploy ransomware; the group’s activity has been linked to recent disruptions at carriers such as Hawaiian Airlines and WestJet and is considered a high-risk ongoing threat.