Scattered Spider duo convicted over $38M Transport for London attack
Summary
Two members of Scattered Spider, a cybercrime collective, were convicted for attacking Transport for London's network in September 2024, which disrupted services, exposed personal data of 10 million people, and caused £29 million in damages. Thalha Jubair and Owen Flowers used social engineering and help-desk impersonation tactics to compromise TfL systems. The group is known for targeting IT support providers to bypass multi-factor authentication (security that requires multiple verification methods) and gain unauthorized access to networks.
Classification
Original source: https://www.csoonline.com/article/4189033/scattered-spider-duo-convicted-over-38m-transport-for-london-attack.html
First tracked: June 24, 2026 at 02:00 PM
Classified by LLM (prompt v3) · confidence: 95%