UK teenagers charged over Scattered Spider cyberattacks targeting TfL and US firms

Two British teenagers have been charged in connection with cyberattacks carried out by the notorious Scattered Spider group, authorities confirmed yesterday.

According to media reports, 19-year-old Thalha Jubair from London and 18-year-old Owen Flowers from Wiltshire face charges over intrusions that targeted Transport for London (TfL) as well as multiple U.S. companies.

The group, also known as 0ktapus, has been linked to ransomware deployments, SIM-swapping schemes, and supply chain compromises.

The Guardian reported that the TfL attack in 2024 disrupted parts of the city’s transport IT systems and highlighted critical weaknesses in infrastructure cybersecurity. U.S. prosecutors said the hackers used impersonation tactics to trick IT helpdesks into resetting multifactor authentication, thereby gaining access to corporate networks.

Cybersecurity Dive noted that the arrests follow a broader crackdown on Scattered Spider, which has been responsible for disruptive attacks on U.S. healthcare and financial organizations.

Experts say the arrests mark progress in prosecuting ransomware-linked crime but warn the group’s tactics remain active. “Disrupting individuals is important, but Scattered Spider’s methods are highly adaptable and will continue to pose a threat,” one analyst told the FT.