British Teen Charged Over $115M Scattered Spider Cyber Extortion Scheme

Thalha Jubair, a 19-year-old British citizen, has been charged by U.S. authorities with conspiracy to commit computer fraud, wire fraud, and money laundering related to over 120 cyberattacks targeting 47 U.S. entities, including critical infrastructure and the federal court system. Operating under multiple aliases and as part of the hacking group Scattered Spider, Jubair and associates used social engineering techniques to access company networks, steal and encrypt data, and demand ransom payments totaling more than $115 million. Investigations revealed that Jubair laundered funds through cryptocurrency wallets and moved millions in digital assets, with law enforcement seizing $36 million in illicit assets from servers under his control. Jubair was arrested in London alongside another suspect linked to a separate cyberattack, with charges carrying a potential sentence of up to 95 years in prison. The case highlights international cooperation among law enforcement agencies from the U.S., U.K., Canada, the Netherlands, Romania, and Australia to combat ransomware and cyber extortion schemes. Authorities emphasize that Jubair's alleged actions represent a significant disruption to U.S. organizations and demonstrate the ongoing commitment to hold cybercriminals accountable.