Two UK teens charged in connection to Scattered Spider ransomware attacks

Two teenagers from the UK have been charged by federal prosecutors in the United States for their alleged involvement in a significant ransomware operation that targeted 47 American companies, resulting in over $115 million in ransom payments over three years. The criminal complaint, which was made public on Thursday, identifies Thalha Jubair, 19, from London, as a member of Scattered Spider, a group known for its English-speaking cybercriminal activities. This group has successfully infiltrated numerous companies worldwide, demanding large ransoms in exchange for avoiding the release or sale of sensitive data obtained during their breaches. On the same day, Jubair and his alleged accomplice, Owen Flowers, 18, from Walsall, West Midlands, were also charged by UK authorities for their roles in last year's cyber assault on Transport for London. This incident prompted a protracted recovery process for the public transit agency. Both individuals were arrested at their residences and subsequently appeared at Westminster Magistrates Court, where they were ordered to return to Crown Court on October 16, as confirmed by Britain’s National Crime Agency (NCA). Notably, Flowers had previously been apprehended concerning the Transport for London attack in September 2024 but was later released. In addition to the transport authority's breach, the NCA alleges that Flowers and his co-conspirators were involved in cyberattacks against SSM Health Care and attempted intrusions into Sutter Health, both based in the United States. Jubair is also facing charges for his failure to provide PIN codes and passwords for devices that were confiscated from him during the investigation.