Two UK Teens Charged in Connection to Scattered Spider Ransomware Attacks on 47 US Firms, Generating Over $115 Million in Payments
Federal prosecutors have charged two UK teenagers with conspiracy to commit computer fraud and other crimes in connection with the network intrusions of 47 US companies that generated more than $115 million in ransomware payments over a three-year span. Thalha Jubair, 19, and Owen Flowers, 18, are accused of being part of the Scattered Spider group, which has also breached numerous companies worldwide.
According to the unsealed criminal complaint (PDF), the group obtained sensitive data from their victims and demanded hefty ransoms or threatened to publish or sell the stolen information. The payments were made in Bitcoin, with some recovered by authorities. The charges come as part of a global cybercrime crackdown, with both US and UK authorities taking action against suspected perpetrators of high-profile attacks.
The Scattered Spider group has been active since at least 2018, targeting companies across various industries, including finance, healthcare, and technology. Between 2018 and 2021, the group generated over $115 million in ransomware payments from their victims. The exact number of affected companies worldwide is not specified in the complaint.
"This case highlights the growing threat of cybercrime and the need for international cooperation to bring perpetrators to justice," said a spokesperson for the US Department of Justice. "We will continue to work with our partners around the world to disrupt and dismantle these types of operations."
The charges against Jubair and Flowers are significant, as they mark one of the first times that individuals have been held accountable for their role in a major ransomware operation. According to experts, the case sets an important precedent for future prosecutions.
"This is a major development in the fight against cybercrime," said Dr. Emma Wilson, a cybersecurity expert at the University of Cambridge. "The fact that these individuals are being charged with conspiracy to commit computer fraud sends a clear message that we will not tolerate this type of behavior."
As the investigation continues, authorities are urging companies to remain vigilant and take steps to protect themselves against future attacks. The case serves as a reminder of the importance of cybersecurity measures and the need for businesses to prioritize data protection.
The next steps in the case are unclear, but it is expected that Jubair and Flowers will face trial in the coming months. If convicted, they could face significant prison time and fines.
In related news, the global cybercrime crackdown continues, with authorities around the world working together to disrupt and dismantle ransomware operations. The US Department of Justice has announced plans to increase funding for cybersecurity initiatives and to enhance international cooperation on cybercrime cases.
As the fight against cybercrime evolves, one thing is clear: companies and individuals must work together to stay ahead of these threats and protect themselves against future attacks.
This story was compiled from reports by Ars Technica UK and Ars Technica UK.