120 Breaches: 2 Teens Arrested for 'Scattered Spider' Hacking Spree

In a shocking turn of events, two teenagers have been arrested by the authorities in connection with a massive hacking spree carried out by the notorious group "Scattered Spider". The UK's National Crime Agency has charged 19-year-old Thalha Jubair and 18-year-old Owen Flowers, both of whom appeared in a local court on Thursday. The US Justice Department has also taken action, charging Jubair for his alleged role in hacking activities "in relation to at least 120 computer network intrusions and extortion involving 47 US entities".

The scale of the hacking operation is staggering, with victims paying at least $115 million in ransom payments. The malicious attacks caused widespread disruption to US businesses and organizations, including critical infrastructure and the federal court system. Both Jubair and Flowers have been on law enforcement's radar for some time, but it appears that their ages may have played a role in delaying the arrest.

In July, security journalist Brian Krebs reported that the UK had also arrested both suspects for data theft attacks on local retailers Marks & Spencer and Harrods. Additionally, a year ago, the UK's National Crime Agency arrested Flowers for a cyberattack on Transport for London; he was reportedly later released on bail.

The arrest of Jubair and Flowers marks a significant milestone in the investigation into the activities of Scattered Spider. The group has been terrorizing companies by breaking into their networks, stealing confidential data, and spreading ransomware. What sets Scattered Spider apart from other cyber gangs is its members' surprising youth and native English proficiency.

To pull off the hacks, Scattered Spider has often resorted to social engineering tactics, such as posing as IT support staff to trick employees at target companies into giving up passwords or installing remote access software on their machines. Investigators traced the breaches to Jubair because he allegedly controlled a server that hosted cryptocurrency wallets used to receive ransomware payments from the hacks.

According to the Justice Department, if convicted, Jubair faces a maximum penalty of 95 years in prison. He has been charged with various counts of computer fraud and money laundering. The arrest of Jubair and Flowers brings some much-needed closure to the victims of Scattered Spider's hacking spree, but it also serves as a reminder of the ongoing threat posed by cybercrime.