UK Teens Charged in Connection to Scattered Spider Ransomware Attacks
LONDON - Two UK teenagers have been charged in connection with the Scattered Spider ransomware attacks that compromised the networks of 47 US companies, generating over $115 million in payments from victims worldwide.
Thalha Jubair, 19, and Owen Flowers, 18, were charged by federal prosecutors in the United States with conspiracy to commit computer fraud and other crimes. The charges stem from their alleged involvement with Scattered Spider, an English-language-speaking group that has breached the networks of scores of companies globally.
According to a criminal complaint unsealed on Thursday, Jubair and Flowers demanded hefty ransoms from victims or threatened to publish or sell confidential data obtained through the breaches. Bitcoin payments made by victims were also recovered as part of the investigation.
"We are committed to holding accountable those responsible for these malicious cyberattacks," said US Attorney Philip Sellinger in a statement. "These charges demonstrate our resolve to disrupt and dismantle the networks that perpetuate ransomware attacks."
The unsealing of the document came on the same day Jubair and Flowers were charged by UK prosecutors in connection with last year's cyberattack on Transport for London (TfL). The agency, which oversees London's public transit system, faced a monthslong recovery effort following the breach.
"TfL takes cybersecurity very seriously and we are working closely with law enforcement to bring those responsible to justice," said a TfL spokesperson. "We appreciate the efforts of UK authorities in investigating this incident."
The Scattered Spider group has been linked to multiple high-profile ransomware attacks worldwide, including breaches at companies in the US, Europe, and Asia. The group's tactics have raised concerns among cybersecurity experts and law enforcement agencies.
"Ransomware attacks are a growing threat globally, and it's essential that we work together to disrupt these networks and bring perpetrators to justice," said Europol Director Catherine De Bolle. "We commend the efforts of US and UK authorities in this case."
The charges against Jubair and Flowers mark a significant development in the global effort to combat ransomware attacks. As law enforcement agencies continue to investigate, victims are advised to remain vigilant and report any suspicious activity.
The case is ongoing, with further developments expected in the coming weeks.
*Reporting by Arstechnica.*
