UK teenager Thalha Jubair, 19, was arrested and charged with conspiracy to commit computer fraud and money laundering related to at least 120 network intrusions and extortion attacks by the notorious cybercrime gang Scattered Spider. The group, known for its SIM-swapping turned social-engineering and ransomware tactics, has been linked to several high-profile retail intrusions and digital heists.
Jubair allegedly participated in around 120 network intrusions, including at least 47 US-based organizations, and made critical mistakes that pointed to his alleged involvement. For example, he used a wallet on the same server as wallets receiving ransom payments to buy gaming gift cards tied to an account in his name, which were then used to order takeout.
The FBI and UK authorities followed clues, including paying for gift cards from Jubair’s wallet, to make the arrest. This is seen as a significant blow to Scattered Spider, which has been active since at least 2022.
Jubair faces charges related to his alleged involvement in a cyberattack on Transport for London last year and other US-based organizations. The case highlights the importance of public-private collaboration in disrupting cybercrime operations.
Note: I simplified the text by removing technical terms and jargon, and rephrasing complex sentences into clear and concise language.
Source: https://www.theregister.com/2025/09/19/scattered_spider_teen_cuffed