Latest News

UK hackers sentenced for cyberattack on London Transport that cost almost $40 million

The two British hackers who were responsible for a cyberattack in 2024 on London's public transportation system that cost PS29 million ($39.16 million) to fix each received 5-1/2 years of jail time on Thursday.

Thalha Jubair and Owen Flowers, both aged 18, pleaded to guilty last month of hacking Transport for London. The hacking group "Scattered Spider" was blamed for the hack.

Jubair, and Flowers, hacked TfL from August 31 to September 3, 2024. Jubair worked up to 16 hour days, Flowers at his grandmother's house in central England, after they gained access to the?TfL system.

Mark Fenhalls, the prosecutor, said that Jubair had broadcast a livestream which Flowers watched. The video on Flowers' laptop was the key evidence.

Fenhalls stated that the attackers could have "shutdown TfL completely", and the attack only stopped when TfL disconnected their computer systems. It took six months to repair the damage.

Flowers admitted to conspiring with others to hack into two non-profit health systems in the United States, just days after attacking TfL. These attacks stopped "only because he had been arrested and caught in the act", Fenhalls said.

Flowers, Fenhalls reported, continued to hack from prison even after his arrest. Devices showed search terms, and attempted access to domains related to the Crown Prosecution Service, and the prison in which he was held.

Mark Turner, who sentenced Jubair?and Flowers both to five-and-a half years in prison said that he understood they were "primarily motivated" by their own bravado.

Attacks linked to 'Scattered Spider'

Multiple reports have linked the hacking group Scattered Spider to an attack against Marks & Spencer.

The Prosecutors stated on Wednesday that Scattered spider?was more of a pattern than a group, although Jubair?and Flowers claimed to have links with it.

Jubair Flowers and were 17 and 18 when they attacked TfL, but Fenhalls claimed that they were "highly-skilled with computers" and capable of causing havoc.

Jubair, a member of the Lapsus$ hacking collective, was convicted in 2023 for hacking and blackmailing Nvidia chipmaker. He was also sentenced to prison for stalking of two young women and "swatting" of one of them by sending armed police into her home. ($1 = 0.7406 lbs) (Editing done by William James and Timothy Heritage).

(source: Reuters)