Mitigating advanced social engineering threats: multi-factor authentication and the evolving tactics of Scattered Spider in the aviation sector

The rapid escalation of cyber threats targeting critical infrastructure, notably the aviation industry, has intensified the need for resilient cybersecurity frameworks. This study examines the evolving tactics of the cybercriminal group Scattered Spider, which has recently expanded its operations to include airlines and their service providers, exploiting procedural weaknesses in multi-factor authentication (MFA) systems. Through a comprehensive scoping literature review of peer-reviewed articles, industry reports, and case studies published between 2019 and 2025, and by analyzing recent real-world incidents such as those at WestJet and Hawaiian Airlines, this research identifies persistent vulnerabilities in MFA implementation and the limitations of current security measures against advanced social engineering attacks. The study’s findings confirm that while MFA remains a robust technical safeguard, its effectiveness is significantly undermined by human factors and gaps in organizational processes, particularly at IT help desks. The research contributes novel insights by integrating socio-technical analysis with sector-specific threat assessment, offering actionable recommendations for aviation stakeholders and regulatory bodies. These results are of high practical value for cybersecurity practitioners, policymakers, and organizational leaders seeking to enhance authentication practices and protect critical operations from emerging cyber threats. The outcomes are expected to inform policy development, security training, and technology adoption across industries facing similar risks.