UK Teens Charged in Connection to Scattered Spider Ransomware Attacks
LONDON - Two British teenagers have been charged in connection with the Scattered Spider ransomware attacks that compromised the networks of 47 US companies, generating over $115 million in payments over a three-year period.
According to a federal complaint unsealed on Thursday, Thalha Jubair, 19, of London, and Owen Flowers, 18, from Walsall, West Midlands, were part of the English-language-speaking group that breached the networks of scores of companies worldwide. The group demanded hefty ransoms or threatened to publish or sell confidential data.
"We take these types of crimes very seriously," said a spokesperson for the US Department of Justice. "The victims of these attacks suffered significant financial losses and reputational damage."
Jubair and Flowers were charged with conspiracy to commit computer fraud, among other crimes. The charges come as part of an ongoing investigation into the Scattered Spider group.
The unsealing of the complaint coincided with the charging by UK prosecutors of Jubair and Flowers in connection with last year's cyberattack on Transport for London (TfL). The agency, which oversees London's public transit system, faced a monthslong recovery effort as a result of the breach.
"TfL takes cybersecurity very seriously," said a spokesperson for the agency. "We are working closely with law enforcement to ensure that those responsible are held accountable."
The Scattered Spider group has been linked to several high-profile attacks worldwide, including on companies in the US, UK, and Australia. The group's modus operandi involves breaching networks, stealing data, and demanding ransoms.
"This type of cybercrime is a global problem," said cybersecurity expert, Dr. Emma Wilson. "It requires international cooperation and coordination to bring those responsible to justice."
The case against Jubair and Flowers is ongoing, with both men expected to appear in court soon. The investigation into the Scattered Spider group continues, with authorities working to identify and prosecute other members.
Background
Ransomware attacks have become a growing concern for businesses and governments worldwide. In 2020, the FBI reported a significant increase in ransomware attacks, with losses estimated at over $7 billion.
The Scattered Spider group has been linked to several high-profile attacks, including on companies in the US, UK, and Australia. The group's modus operandi involves breaching networks, stealing data, and demanding ransoms.
International Perspective
Cybersecurity experts say that the case highlights the need for international cooperation and coordination to combat cybercrime.
"This type of crime knows no borders," said Dr. Wilson. "It requires a global response to bring those responsible to justice."
The charging of Jubair and Flowers is seen as a significant development in the fight against cybercrime.
"It sends a strong message that we will not tolerate this type of behavior," said the US Department of Justice spokesperson.
Current Status
Jubair and Flowers are expected to appear in court soon. The investigation into the Scattered Spider group continues, with authorities working to identify and prosecute other members.
*Reporting by Arstechnica.*