Suspect linked to 120 computer network breaches, netting $115 million in ransomware extortion, apprehended - Former member of Scattered Spider implicated in cyberattacks on 47 American organizations
In a significant development in the world of cybercrime, Thalha Jubair, a 19-year-old UK resident, was arrested in London on September 18. The arrest was made in connection with a series of alleged computer network intrusions over a three-year period, starting from 2022.
According to the allegations, Jubair stands accused of being involved in at least 120 computer network intrusions. The charges against him also include an attack against Transport for London (TFL) infrastructure in August 2024, which resulted in the compromise of customer data, including names, contact details, and addresses.
Jubair is accused of being part of the hacking group 'Scattered Spider,' a group known for utilizing social engineering techniques to gain access to corporate networks and steal data or use ransomware attacks to extort businesses for profit. It is alleged that Jubair extorted over $115 million from victims worldwide.
In a related development, London police arrested another accused hacker, 18-year-old Owen Flowers, in connection with the TFL hack. Flowers also stands accused of involvement with the TFL hack, and additional charges against him have been filed in the U.S., where he's accused of attacking health companies SSM Health Care Corporation and Sutter Health.
Besides Flowers, two other suspects, aged 18 and 19, were arrested in the UK in connection with the TFL hack allegations on August 31, 2024. They were taken into custody and were scheduled to appear before a judge on October 16, 2024, at the Southwark Crown Court in London.
In July 2024, law enforcement seized a server storing cryptocurrency wallets containing approximately $36 million, which were allegedly controlled by Thalha Jubair. It is further alleged that Jubair transferred some of the seized cryptocurrency tokens, with a reported net worth of $8.4 million, to another wallet.
The Department of Justice has charged Jubair with money laundering conspiracy, computer fraud, and wire fraud conspiracy. The FBI Newark field office, UK National Crime Agency, City of London Police, and police agencies in the Netherlands, Romania, Canada, and Australia are involved in the investigation of Jubair's case.
Special Agent in Charge Stefanie Roddy for the FBI stated that the arrest of Thalha Jubair underscores the commitment to pursue cybercriminals and hold them accountable for alleged extortion activities. The case serves as a reminder of the ongoing efforts to combat cybercrime and protect the public from such threats.
