Tag:

members

Key Scattered Spider Members Plead Guilty to Crippling Transport for London Cyberattack, Revealing Extensive Global Cybercrime Network

by admin July 19, 2026

written by admin

In a significant development for international cybercrime enforcement, two key members of the notorious cybercrime group known as Scattered Spider have pleaded guilty in the United Kingdom to charges stemming from an August 2024 cyberattack that severely disrupted Transport for London (TfL), the crucial entity overseeing the public transport network across the Greater London area. The guilty pleas, entered by 20-year-old Thalha Jubair and 18-year-old Owen Flowers, came on the very first day of what was anticipated to be a six-week trial, underscoring the weight of the evidence amassed against them by law enforcement agencies. This case highlights the persistent and evolving threat posed by sophisticated cybercriminal organizations to critical national infrastructure and major corporations worldwide.

The Defendants and Their Admissions

Thalha Jubair, residing in East London, and Owen Flowers, from Walsall, each admitted to conspiring to commit unauthorized acts against Transport for London’s computer systems. More critically, they also pleaded guilty to causing a risk of serious damage to human welfare, a charge that reflects the profound potential consequences of disrupting a public transport network relied upon by millions daily. The August 2024 attack on TfL sent ripples of concern through government and cybersecurity circles, demonstrating the vulnerability of essential services to coordinated digital assaults. The image released by the UK National Crime Agency (NCA) shows Flowers (left) and Jubair, both young individuals at the heart of a complex and financially lucrative cyber operation.

Beyond the TfL attack, Owen Flowers separately admitted to his involvement in a conspiracy to hack into U.S.-based healthcare providers SSM Health Care Corporation and Sutter Health in September 2024. These admissions reveal a broader pattern of targeting critical sectors, from transportation to healthcare, where disruptions can have severe real-world impacts on public safety and well-being. The attack on healthcare providers, in particular, raises concerns about patient data compromise and the potential for life-threatening operational paralysis.

Jubair’s legal challenges extend across the Atlantic, as he is also a wanted individual by U.S. law enforcement agencies. In September 2025, prosecutors in New Jersey unsealed an indictment against Jubair and other alleged Scattered Spider members. This comprehensive indictment details charges of computer fraud, wire fraud, and money laundering in connection with an staggering 120 computer network intrusions affecting 47 U.S. entities between May 2022 and September 2025. The U.S. Department of Justice alleges that victims of these widespread attacks paid at least $115 million in ransom payments, illustrating the immense financial scale of Scattered Spider’s operations.

Scattered Spider: A Profile in Cybercrime

Scattered Spider, also known by various other monikers such as UNC3944, Muddled Libra, and Star Fraud, has gained notoriety for its sophisticated social engineering tactics and high-profile attacks. The group typically targets large organizations, often employing SIM-swapping and SMS phishing to gain initial access. Their strategy is frequently to leverage this initial access to compromise internal systems, exfiltrate sensitive data, and then deploy ransomware, demanding substantial payments from their victims.

The group’s track record includes a string of high-impact incidents that have made headlines globally. In September 2023, Scattered Spider was responsible for ransomware attacks that severely disrupted operations at Las Vegas casinos operated by MGM Resorts and Caesars Entertainment. These attacks caused significant financial losses and operational headaches for the casino giants, demonstrating the group’s capability to impact major corporate entities. Following these attacks, Owen Flowers was reportedly the Scattered Spider member who anonymously granted interviews to the media, a move that highlighted the group’s brazenness and confidence.

Prior to the TfL incident, Flowers and Jubair had already drawn the attention of UK authorities. In July 2025, it was reported that both individuals were arrested in the United Kingdom in connection with Scattered Spider ransomware attacks against prominent British retailers Marks & Spencer and Harrods, as well as the British food retailer Co-op Group. These arrests signaled a concentrated effort by UK law enforcement to dismantle the group’s operations within its borders and bring its members to justice.

The Modus Operandi: SIM-Swapping and SMS Phishing

Central to Scattered Spider’s success has been its mastery of social engineering techniques, particularly SIM-swapping and SMS phishing, which allow them to bypass even robust security measures like multi-factor authentication (MFA).

SIM-Swapping Explained: Thalha Jubair, according to prosecutors, played a pivotal role in co-running a bustling Telegram channel named "Star Chat." This channel served as the hub for a sophisticated SIM-swapping group. The method involved using voice and SMS-based phishing attacks to steal credentials from employees at major wireless providers in both the U.S. and the U.K. Once access to internal telecom systems was gained, the group would then offer a service to redirect a target’s phone number to a device controlled by the attackers. This enabled them to intercept the victim’s calls and text messages, including critical one-time codes for multi-factor authentication. A receipt from "Star Fraud Chat’s" SIM-swapping service, targeting a T-Mobile customer after the group gained access to internal T-Mobile employee tools, illustrates the technical sophistication of their operation. "Rocket Ace" was identified as one of Jubair’s hacker handles, according to U.S. prosecutors, further cementing his direct involvement. This technique effectively neuters a crucial layer of security, allowing attackers to gain access to a myriad of online accounts.

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

Mass SMS Phishing Campaigns: New Jersey prosecutors also implicate Jubair in a mass SMS phishing campaign during the summer of 2022. This weeks-long campaign was designed to steal single sign-on credentials from employees at hundreds of companies. The success of this broad phishing effort led to intrusions and data thefts at over 130 organizations, including high-profile names such as LastPass, DoorDash, Mailchimp, Plex, and Signal. The compromise of these services could lead to widespread data breaches, financial fraud, and privacy violations for millions of users. The scale of this operation underscores the group’s ambition and their ability to execute large-scale attacks simultaneously.

The "Everlynn" Persona and Fraudulent Emergency Data Requests:

Further delving into Jubair’s past activities, it was revealed that at the age of 15, one of his alter egos was "Everlynn." Under this persona, Jubair was involved in selling fraudulent "emergency data requests" (EDRs). This illicit practice involved using compromised police and government email addresses to demand subscriber data (such as usernames, IP addresses, and email addresses) from major tech companies. The requests falsely claimed to concern urgent matters of life and death, thereby bypassing the typical legal requirements for obtaining such sensitive information. This tactic not only exploited the trust placed in law enforcement agencies but also put individuals’ private data at severe risk without due process. It demonstrates a profound understanding of administrative processes and a willingness to manipulate them for illicit gain from a remarkably young age.

A Broader Crackdown: International Cooperation and Other Convictions

The arrests and guilty pleas of Flowers and Jubair are part of a wider, internationally coordinated effort to dismantle Scattered Spider and bring its members to justice. Law enforcement agencies, particularly the UK’s National Crime Agency (NCA) and the U.S. Department of Justice (DOJ) and FBI, have been working in concert to track, identify, and apprehend members of this globally distributed cybercrime syndicate.

In April 2026, 24-year-old British national and another alleged Scattered Spider member, Tyler "Tylerb" Buchanan, pleaded guilty to wire fraud conspiracy and aggravated identity theft. Buchanan’s admissions were related to his participation in the group’s extensive SMS phishing spree in the summer of 2022. The government stated that Buchanan, Jubair, and others used the credentials harvested from that campaign to steal at least $8 million in cryptocurrency from victims across the United States. Buchanan is currently scheduled to be sentenced on October 2, serving as another testament to the ongoing success of these investigations.

Further demonstrating the reach of law enforcement, in August 2025, 20-year-old Scattered Spider member Noah Michael Urban, from Florida, was sentenced to 10 years in federal prison and ordered to pay $13 million in restitution. Urban had pleaded guilty to charges of wire fraud and conspiracy, highlighting the severe penalties faced by those involved in such illicit activities.

The U.S. Department of Justice has also indicated that three other alleged Scattered Spider defendants, indicted alongside Buchanan, still face charges. These include Ahmed Hossam Eldin Elbadawy, 24, also known as "AD," from College Station, Texas; Evans Onyeaka Osiebo, 21, from Dallas, Texas; and Joel Martin Evans, 26, also known as "joeleoli," from Jacksonville, North Carolina. These ongoing cases underscore the persistent efforts to fully dismantle the group and hold all its members accountable.

Implications for Cybersecurity and Critical Infrastructure

The Transport for London cyberattack and the broader activities of Scattered Spider carry significant implications for global cybersecurity, particularly concerning critical national infrastructure.

Vulnerability of Essential Services: The successful targeting of TfL, a lifeline for millions of Londoners, highlights that even highly protected critical infrastructure remains vulnerable to determined and sophisticated cybercriminal groups. A prolonged disruption could have catastrophic economic, social, and even public safety consequences. This case serves as a stark reminder that robust digital defenses are as crucial as physical security for such entities.
The Evolving Threat Landscape: Scattered Spider’s reliance on social engineering, SIM-swapping, and SMS phishing demonstrates a shift from purely technical exploits to human-centric attacks. This emphasizes the need for comprehensive security strategies that include not only advanced technological safeguards but also continuous employee training, robust incident response plans, and strict adherence to security protocols.
Challenges of Attribution and Prosecution: The geographically dispersed nature of Scattered Spider’s members, operating across different countries and jurisdictions, presents immense challenges for law enforcement. The success in prosecuting Flowers and Jubair, alongside other members, is a testament to the increasing effectiveness of international cooperation and intelligence sharing between agencies like the NCA, FBI, and DOJ.
The "Young Hacker" Phenomenon: The relatively young age of many individuals involved in Scattered Spider, including Flowers and Jubair, raises questions about the motivations and pathways that lead young talent into cybercrime. It also presents a challenge for legal systems to balance punitive measures with potential rehabilitation, while sending a clear deterrent message.
Economic and Reputational Damage: The staggering sum of over $115 million in ransom payments alone, alongside the operational costs, reputational damage, and recovery efforts for affected organizations, underscores the immense economic toll of such cyber-attacks. For companies like MGM Resorts, Caesars Entertainment, and various healthcare providers, the impact goes far beyond immediate financial losses.

The guilty pleas by Owen Flowers and Thalha Jubair mark a crucial milestone in the ongoing fight against sophisticated cybercrime. It sends a strong message that despite the perceived anonymity of the internet, law enforcement agencies possess the capabilities and international partnerships to identify, track, and prosecute those who seek to exploit digital vulnerabilities for illicit gain.

Flowers and Jubair are now slated to be sentenced in a London court on July 15, 2026. The outcomes of their sentencing, and those of the other indicted Scattered Spider members, will be closely watched by the cybersecurity community and by potential cybercriminals alike, as they will further define the consequences for engaging in such damaging digital transgressions. This case will undoubtedly serve as a critical precedent in the global effort to secure our increasingly digital world.

July 19, 2026 0 comment

Tech & Startup News

Pentagon Mandates Testosterone Screening for Service Members Amid Medical Expert Warnings of Clinical Risks

by admin July 19, 2026

written by admin

In a move that has sent shockwaves through the medical and defense communities, Secretary of Defense Pete Hegseth announced this week that the United States military will implement mandatory testosterone deficiency screenings for all active-duty and reserve personnel aged 30 and older. The new policy, which integrates hormone testing into annual periodic health assessments, represents a significant shift in the Department of Defense’s approach to service member wellness and physical readiness. While the Pentagon frames the initiative as a tool for "optimization" and long-term health, leading endocrinologists and medical organizations have voiced grave concerns, characterizing the mandate as a "clinical minefield" that lacks a foundation in established medical evidence.

The directive, outlined by Hegseth in a public statement and accompanying social media video, establishes a new baseline for military medical readiness. Personnel under the age of 30 are not subject to the mandate but may request the screening during their annual physicals. Hegseth emphasized that the goal of the program is to "optimize performance, resilience, and long-term health" among the nation’s "warfighters." Although the Secretary clarified that the initiative is not intended to provide "artificial enhancement" and that service members retain the right to decline subsequent treatment, his rhetoric focused heavily on "restoring and optimizing" capabilities to ensure a "biological foundation required to sustain the fight."

A Clash with Medical Consensus

The Pentagon’s new screening protocol stands in direct opposition to the clinical guidelines issued by major medical authorities. Shortly after the announcement, the Endocrine Society—a global organization representing thousands of physicians and scientists specializing in hormone research—issued a formal statement reiterating its stance on population-wide screening. The society noted that there is currently "insufficient evidence to support a general recommendation to perform population-level screening for hypogonadism in asymptomatic men with measurement of blood testosterone level."

Medical experts, including Dr. Bradley Anawalt, Chief of Medicine at the University of Washington Medical Center and a specialist in men’s health, have reacted with alarm. Dr. Anawalt described the policy as a regression in rational healthcare, expressing deep concerns over the ethics and potential health consequences of mass screening. "I’m worried about unnecessary evaluations, incorrect assessments, and incorrect diagnoses that lead to inappropriate prescriptions of testosterone," Anawalt stated, suggesting that the policy could lead to a wave of medical interventions that are neither necessary nor safe for the majority of the military population.

The Complexity of Diagnosing "Low T"

At the heart of the controversy is the medical definition of hypogonadism—a condition where the body does not produce enough testosterone. While the term "Low T" has become a fixture in pharmaceutical marketing, true clinical hypogonadism is relatively rare, affecting perhaps only one percent of the male population. These cases are typically linked to specific disease states, such as Klinefelter syndrome (a genetic condition involving an extra X chromosome) or disorders of the pituitary gland, which regulates hormone production.

For the vast majority of men, however, testosterone levels are influenced by a myriad of external factors rather than underlying disease. Obesity, sleep deprivation, chronic stress, the use of certain medications (such as opioids or corticosteroids), and the natural process of aging can all lead to lower-than-average testosterone readings. In these instances, medical experts argue that the appropriate treatment is addressing the root cause—such as weight loss or improved sleep hygiene—rather than hormone replacement therapy (TRT).

The symptoms of testosterone deficiency are also notoriously non-specific. While true hypogonadism can cause reduced libido, erectile dysfunction, and loss of bone density, many men seek testing for vague symptoms like fatigue, irritability, or decreased concentration. Dr. Anawalt pointed out that these symptoms are common to many conditions and are not reliable indicators of a hormonal imbalance that requires medical intervention.

The Technical Challenges of Mass Screening

Implementing a mandatory screening program across hundreds of thousands of service members presents significant logistical and technical hurdles. Testosterone levels in the human body are highly volatile, fluctuating throughout the day and peaking in the early morning hours. To obtain an accurate reading, clinical guidelines require that blood be drawn early in the morning while the patient is in a fasting state. Furthermore, experts recommend that a "low" reading be confirmed with at least one repeat test to rule out temporary fluctuations.

There is also the issue of laboratory accuracy. The Centers for Disease Control and Prevention (CDC) has established a certification program for testosterone assays to ensure quality and reliability, yet many laboratories still use non-standardized tests. This lack of standardization can lead to wildly different results. Dr. Anawalt noted cases where patients were diagnosed with deficiency based on "normal" readings because the laboratory used an inflated reference range designed to promote prescriptions.

Hegseth wants a "High-T" military; doctors call it a clinical minefield

Furthermore, standard screenings typically measure "total testosterone," which includes hormone molecules that are bound to proteins and are biologically inactive. The "free testosterone"—the portion that actually affects the body—may remain within normal levels even if the total testosterone appears low. This is particularly common in men with a high Body Mass Index (BMI) or diabetes, where protein binding is altered. A mandatory screening program that focuses only on total testosterone could result in thousands of "false positive" diagnoses for men who are biologically healthy.

Risks and Side Effects of Testosterone Replacement Therapy

While TRT can be life-changing for men with severe, disease-driven hypogonadism, it carries substantial risks when administered to those who do not truly need it. One of the most significant concerns for a young military population is the impact on fertility. TRT effectively shuts down the body’s natural sperm production. While this can sometimes be reversed after stopping the therapy, the recovery process can take six months to a year, and in some cases, the impact on fertility may be long-lasting.

Other documented side effects of TRT include:

Polycythemia: An increase in red blood cell counts, which can thicken the blood and increase the risk of clots.
Sleep Apnea: The therapy can worsen or trigger obstructive sleep apnea.
Dermatological Issues: Severe acne and skin oiliness are common.
Prostate Health: While the link to prostate cancer is debated, TRT can cause prostate enlargement and may exacerbate existing issues.

The TRAVERSE trial, a major randomized controlled study, recently looked at the cardiovascular safety of TRT. While it found that standard replacement doses did not significantly increase the risk of heart attacks or strokes in men with diagnosed hypogonadism, it did identify a higher risk of pulmonary embolisms (blood clots in the lungs), which can be fatal.

The Ethical Implications of "Optimization"

The Secretary’s use of the word "optimization" has raised red flags among ethicists. In the context of the military, the line between medical treatment and human enhancement can become blurred. If the goal of the policy is to create a more effective "warfighter" rather than to treat a specific illness, it raises questions about informed consent and the long-term welfare of service members.

Critics argue that the military is essentially conducting a massive, uncontrolled experiment on its personnel. There is a concern that service members may feel pressured to accept TRT if their screenings come back low, fearing that a "deficiency" on their medical record could impact their career progression or deployment status.

Moreover, the "withdrawal syndrome" associated with TRT is a significant concern. Once an individual begins hormone replacement, their natural production of testosterone often ceases. If a service member decides to stop the therapy—perhaps after leaving the military or due to side effects—they may experience months of extreme fatigue, depression, and physical weakness as their body struggles to restart its natural endocrine functions.

Broader Impact on Public Health

The Pentagon’s decision is expected to have ripple effects far beyond the military. As one of the nation’s largest employers, the military’s adoption of universal testosterone screening may normalize the practice in the civilian sector, driving up demand for TRT among men who do not meet clinical criteria for the treatment.

Dr. Anawalt noted that waiting lists for testosterone consultations are already months long, fueled by a cultural shift that views the hormone as a "magic bullet" for aging and vitality. "We doctors are not a cabal trying to withhold some secret recipe," he said. "If testosterone was good for all men, we’d be telling everybody that. What we’re saying is that the information available and prior experience suggests we should be cautious."

As the Department of Defense prepares to roll out the screening program, the medical community remains watchful. The conflict highlights a growing tension between the desire for technological and biological "optimization" and the traditional medical principle of primum non nocere—first, do no harm. For the thousands of service members aged 30 and older, the new policy means that their next annual physical will include a test that remains one of the most controversial topics in modern endocrinology.

July 19, 2026 0 comment