Two Scattered Spider Suspects Arrested in UK; One Charged in US

Two Scattered Spider suspects have been arrested in the UK and another charged in the US over the group’s alleged cyber offences, with Thalha Jubair, 19, from East London, and Owen Flowers, 18, from Walsall, West Midlands, facing UK charges related to a TfL cyberattack that disrupted services without impacting transport. Flowers had already been arrested in September 2024 in connection with the attack, and investigators have now linked him to intrusions at US healthcare organisations, leading to additional charges.

In the United States, Jubair is charged with computer fraud, wire fraud and money laundering conspiracy over alleged involvement in more than 120 cyberattacks worldwide, including 47 US entities; authorities say he controlled wallets and servers that held roughly $36 million in cryptocurrency, and that about $8.4 million was transferred to another wallet in July 2024 when servers were seized.

According to the complaint, Jubair and co-conspirators used social engineering to gain access, stole and encrypted data, and extorted victims by demanding ransom to avoid leakages online; Acting Assistant Attorney General Matthew R. Galeotti described the attacks as highlighting a growing threat from brazen cybercriminals.

The case follows several recent arrests and charges tied to Scattered Spider, also known as Octo Tempest, UNC3944 and 0ktapus, as the group maintains a controversial claim of retirement amid ongoing industry scepticism.