Two teenagers, allegedly part of the notorious Scattered Spider cybercrime group, have been arrested and charged in the United Kingdom in connection with the cyberattack on Transport for London (TfL) in August of last year. The UK’s National Crime Agency (NCA) announced that Thalha Jubair, 19, and Owen Flowers, 18, were apprehended at their homes. Both face charges under the Computer Misuse Act for conspiring to commit unauthorized acts against TfL. The attack caused significant disruption and financial losses for London’s transport authority.
The investigation into the TfL hack has been lengthy and complex, highlighting the increasing threat from English-speaking cybercriminal organizations. Owen Flowers had been previously arrested in connection with the attack in September 2024 but was released on bail. Following his recent arrest, authorities discovered evidence allegedly linking him to cyberattacks on U.S. healthcare companies SSM Health Care Corporation and Sutter Health, leading to additional charges. Thalha Jubair also faces a charge for failing to provide investigators with access to his seized electronic devices.
Scattered Spider, also known by aliases such as Muddled Libra and UNC3944, is a financially motivated hacking group known for its sophisticated social engineering tactics. The group has been linked to a string of high-profile attacks on major corporations, including MGM Resorts and Caesars Entertainment. The recent arrests represent a significant development in the ongoing efforts to combat the growing threat posed by this elusive and damaging cybercrime collective. The charges against the two teenagers could result in a sentence of life in prison if convicted.
