The FBI has issued a fresh cybersecurity alert, warning that the Scattered Spider threat group, which is already known for major attacks on companies like Marks & Spencer, is now setting its sights on the airline industry and its supply chains. Instead of using complex malware to get in, they’re simply manipulating IT help desks into adding unauthorized two-factor authentication (2FA) devices to compromised accounts. This makes it really easy to slip past what many assume is a strong security wall.

The FBI says that these impersonation tactics rely on social engineering. Attackers often pose as employees or contractors and sound convincing enough to fool even experienced support staff. What are you supposed to do? If someone asks to add a new 2FA method to an account, remember to follow normal security processes, regardless of how urgent or legitimate the request sounds. The FBI also recommends contacting your local FBI office if you suspect that your organization has been targeted.