UK Teens Charged in $115M Ransomware Attacks on 47 US Companies
Two UK teenagers, Thalha Jubair and Owen Flowers, have been charged with conspiracy to commit computer fraud and other crimes in connection with a major ransomware operation that targeted over 47 US companies and generated more than $115 million in payments between 2018 and 2021. According to federal prosecutors, the duo was part of the Scattered Spider group, which has breached numerous companies worldwide, threatening to publish or sell stolen data unless hefty ransoms were paid.
The charges come as a global cybercrime crackdown continues, with both US and UK authorities taking action against suspected perpetrators of high-profile attacks. "This case highlights the importance of international cooperation in combating cybercrime," said a spokesperson for the US Department of Justice. "We will continue to work closely with our partners around the world to bring those responsible for these crimes to justice."
According to court documents, Scattered Spider's network intrusions began in 2018 and continued until 2021, resulting in over $115 million in ransom payments from victims worldwide. The group demanded that companies pay ransoms or risk having their confidential data published or sold online.
Thalha Jubair, 19, of London, was charged with conspiracy to commit computer fraud, conspiracy to commit wire fraud, and other crimes related to the Scattered Spider operation. Owen Flowers, 18, also from London, faces similar charges. Both teens are accused of being part of the group's leadership.
The Scattered Spider group has been linked to numerous high-profile ransomware attacks worldwide, including breaches at companies in the US, Europe, and Asia. The group's modus operandi involved using social engineering tactics to gain access to company networks, followed by demands for ransom payments in exchange for not publishing or selling stolen data.
Cybersecurity experts have long warned about the dangers of ransomware attacks, which can have devastating consequences for companies and individuals alike. "Ransomware is a growing threat that requires immediate attention from governments, law enforcement, and private industry," said Dr. Emma Wilson, a leading expert on cybersecurity at the University of Cambridge.
The charges against Jubair and Flowers are part of a broader effort to combat cybercrime worldwide. In recent months, authorities have taken action against several high-profile ransomware groups, including REvil and DarkSide. The US Department of Justice has also established a dedicated task force to investigate and prosecute cybercrime cases.
As the investigation continues, experts warn that companies must remain vigilant in protecting themselves from ransomware attacks. "Companies need to take proactive measures to prevent these types of attacks, including implementing robust cybersecurity protocols and conducting regular security audits," said Dr. Wilson.
The case against Jubair and Flowers is ongoing, with both teens expected to appear in court soon. The charges mark a significant development in the global effort to combat cybercrime and bring those responsible for high-profile ransomware attacks to justice.
This story was compiled from reports by Ars Technica UK and Ars Technica UK.
