American Authorities Accuse British Adolescent for Multiple Years of Participating in Cyberattacks
UK Prosecutors Charge Two Over TfL Cyberattack
In a significant development, UK prosecutors have charged Thalha Jubair, a 19-year-old London resident, and Owen Flowers, an 18-year-old from Walsall, West Midlands, with computer misuse and fraud-related charges in relation to the cyberattack on Transport for London (TfL).
The charges against Jubair and Flowers are the result of a "lengthy and complex" investigation by the National Crime Agency's Cyber Crime Unit. According to reports, the duo is alleged to have participated in a conspiracy involving computer fraud, wire fraud, and money laundering in relation to at least 120 computer network intrusions.
The cyberattack on TfL, carried out by members of the Scattered Spider group, caused millions of pounds in losses to the organization. The disruption affected millions of travelers' ability to pay for some services and access information online, but did not shut down transport in the city.
Jubair, who goes by several aliases, including "EarthtoStar," "Brad," "Austin," and "@autistic," on Telegram and social media, is also accused of using social engineering techniques to gain access to companies' computer networks, steal and encrypt their data, and demand ransom payments for the information's safe return. This is not the first time Jubair has been in the spotlight; earlier this year, the U.S. Justice Department accused him of engaging in a years-long series of cyberattacks.
In addition to the charges concerning TfL, Flowers was charged by British prosecutors with alleged involvement in attacks that targeted US health-care companies SSM Health Care Corporation and Sutter Health. The accused cyberattacks targeted 47 American organizations and netted more than $100 million in ransom payments.
Thalha Jubair is alleged to have gained access to the networks of a "U.S. based critical infrastructure company" and "the U.S. courts" as part of the cyberattacks. No victim organizations were named in the indictment.
Both Jubair and Flowers appeared at London's Westminster Magistrates Court on Thursday and were remanded in custody pending their next hearing on Oct. 16. The other members of the Scattered Spider group mentioned in connection with the accused activities include two young men from the United Kingdom: a 19-year-old from East London and an 18-year-old from Walsall, both arrested and charged for their involvement in extensive cyberattacks and ransomware extortion targeting numerous companies and causing major disruptions such as to Transport for London.
The NCA had earlier warned of an increase in the threat from cybercriminals based in the UK and other English-speaking countries. The charges against Jubair and Flowers underscore the need for continued vigilance and cooperation between law enforcement agencies to combat cybercrime.
