U.Okay. police mentioned on Thursday that the jailing of two hackers has “severely” hampered the actions of the notorious cybercrime group referred to as Scattered Spider.
Owen Flowers, 18, and Thalha Jubair, 20, pleaded responsible earlier this 12 months to hacking Transport of London (TfL), the federal government physique overseeing the U.Okay. capital’s public transit system, in 2024. The 2 had been sentenced to 5 years and 6 months in jail on Thursday.
The jailing of Flowers and Jubair is a reminder that, generally, probably the most harmful and efficient hackers don’t work for stylish authorities companies with hundreds of thousands of {dollars} of funds. Extra typically, they are rather very young and smart hackers motivated by cash and infamy amongst their friends.
Teams reminiscent of Scattered Spider, in addition to ShinyHunters, one other cybercriminal collective, typically goal and exploit staff and people reasonably than pc programs, a technique that’s each efficient and arduous to counter.
Whereas hacking teams’ members have a tendency to return and go, the teams themselves can rebrand. However British authorities are satisfied the jailing of Flowers and Jubair represents a major blow to Scattered Spider, an amorphous group that’s been linked to dozens of high-profile assaults, reminiscent of these towards casino giant MGM, airline WestJet, and cybersecurity firm Okta. These assaults in flip gave the hackers entry to a number of of those firms’ clients.
“Scattered Spider has been probably the most vital cybercrime risk to the U.Okay. lately. By this investigation, now we have severely disrupted that risk and introduced key offenders to justice,” mentioned Paul Foster, the pinnacle of the U.Okay. Nationwide Crime Company’s Nationwide Cyber Crime Unit.
The 2 hackers had been behind the cyberattack against TfL in summer season 2024, which took the system’s infrastructure offline, together with the ticketing system, and the net real-time prepare arrival info system. The disruptions lasted for weeks.
Flowers and Jubair were arrested a 12 months later. On the time, the FBI accused Jubair of being concerned in assaults on greater than 120 firms utilizing social engineering ways.
Authorities mentioned the assault towards TfL resulted in losses of round £29 million (round $47 million). The 2 hackers had such deep entry to TfL programs that they “may have shut out and shut down TfL utterly,” and held “the keys to the dominion” to the corporate’s programs, according to The Guardian.
While you buy by hyperlinks in our articles, we may earn a small commission. This doesn’t have an effect on our editorial independence.

