Two members of the Scattered Spider cybercrime group, Thalha Jubair and Owen Flowers, pleaded guilty on the first day of their UK trial to charges related to the August 2024 cyberattack on Transport for London. Flowers also admitted to hacking US healthcare providers. Jubair faces a separate US indictment alleging involvement in 120 network intrusions affecting 47 US entities, with victims paying at least $115 million in ransom. The group is linked to high-profile attacks on MGM Resorts, Caesars Entertainment, Marks & Spencer, Harrods, and Co-op Group, as well as a 2022 SMS phishing campaign that hit over 130 organizations including LastPass and Signal. Both are scheduled for sentencing on July 15, 2026.
331 Impressions