On 17 September 2025, the Las Vegas Metropolitan Police Department arrested a suspected Scattered Spider member linked to attacks on Las Vegas casinos for computer intrusion, extortion, and identity theft. Between August and October 2023, multiple Las Vegas casinos suffered network intrusions linked to the cybercrime group “Scattered Spider,” prompting an FBI investigation.
See: https://redskyalliance.org/xindustry/scattered-spider-s-devious-web
“Through the course of the investigation, detectives were able to identify a teenage male as a suspect in the case,” reads the announcement by the Las Vegas Metropolitan Police Department. On September 17, 2025, the juvenile suspect surrendered himself to the Clark County Juvenile Detention Center, where he was booked for the following charges:
- One count of Unlawful Acts Regarding Computers.
- Three counts of Obtaining and Using Personal Identifying Information of Another Person to Harm or Impersonate a Person.
- One count of Extortion.
- One count of Conspiracy to Commit Extortion.
The Clark County District Attorney’s Office seeks to move the suspect to the criminal division to face charges as an adult.[1]
Recently, UK law enforcement authorities arrested two teenagers who are members of the notorious Scattered Spider hacking group in connection with their role in the cyber-attack that hit Transport for London (TfL).
Transport for London (TfL) is a local government body responsible for most of the transport network in London, United Kingdom. In August 2024, the organization suffered a cyberattack.
The two suspects are Thalha Jubair (also known as EarthtoStar, Brad, Austin, and @autistic), 19, from East London, and Owen Flowers, 18, from Walsall, West Midlands. The National Crime Agency (NCA) arrested both at their home addresses on 17 September 2025. “Two men have been charged as part of the National Crime Agency investigation into a cyber-attack on Transport for London (TfL).” reads the NCA announcement. “TfL was subject to a network intrusion on 31 August 2024, which investigators believe was carried out by members of the online criminal collective known as Scattered Spider.”
Both are charged with conspiring together to commit unauthorized acts against TfL, under the Computer Misuse Act.
This article is shared with permission at no charge for educational and informational purposes only.
Red Sky Alliance is a Cyber Threat Analysis and Intelligence Service organization. We provide indicators of compromise information via a Notification and a Tier I Mitigation service (RedXray) or an analysis service (CTAC). For questions, comments, or assistance, please contact the office directly at 1-844-492-7225 or feedback@redskyalliance.com
- Reporting: https://www.redskyalliance.org/
- Website: https://www.redskyalliance.com/
- LinkedIn: https://www.linkedin.com/company/64265941
Weekly Cyber Intelligence Briefings:
REDSHORTS - Weekly Cyber Intelligence Briefings
https://register.gotowebinar.com/register/5207428251321676122
[1] https://securityaffairs.com/182490/cyber-crime/a-suspected-scattered-spider-member-suspect-detained-for-casino-network-attacks.html
Comments