DOJ Charges UK National Linked to Scattered Spider in $115M Cyber Extortion Scheme

The U.S. Department of Justice (DOJ) has unsealed a criminal complaint charging Thalha Jubair, a 19-year-old United Kingdom national, with leading roles in an international cybercrime and extortion campaign attributed to the Scattered Spider group. Jubair—known online as “EarthtoStar,” “Brad,” “Austin,” and “@autistic”—conspired to infiltrate U.S. corporate and government networks, steal sensitive data, and extort victims for millions.

From as early as May 2022 to as recently as September 2025, Jubair and his associates were involved in approximately 120 network intrusions, including accessing the computer networks of at least 47 U.S.-based victims, with victims paying more than $115 million in ransom payments. The complaint notes that Jubair personally targeted a U.S.-based critical infrastructure company and the U.S. Courts between October 2024 and January 2025.

Investigators say he and his co-conspirators laundered ransom funds through cryptocurrency wallets, including $36 million seized by law enforcement and a further $8.4 million Jubair allegedly transferred to evade seizure. Jubair faces multiple counts and a maximum sentence of 95 years in prison if convicted.