Scattered Spider Hackers Plead Guilty

Scattered Spider hackers plead guilty in London

Scattered Spider members Owen Flowers and Thalha Jubair ended their legal battle on opening day. So they entered guilty pleas in a London courtroom this week, and their actions caused widespread disruption while also being cited as posing a risk to human welfare. The court didn't take that lightly.

They appeared in court. Flowers, 18, and Jubair, 20, represented a core segment of a group known for high-stakes digital intrusions in a coordinated criminal campaign that reached well beyond the United Kingdom. So their conviction marks a shift in the ongoing effort to dismantle the infrastructure used by these bad actors.

A history of digital disruption

The scope of their activities was extensive. The following list highlights key elements of their criminal operations:

• The group targeted 47 entities in the United States between May 2022 and September 2025.
• Operations included attacks on well-known retail firms such as Harrods and Marks and Spencer.
• Criminal efforts involved a mass SMS phishing campaign that compromised credentials at over 130 organizations.

Jubair played a hands-on role in these technical schemes. But this platform wasn't just any system , wait, actually it served as a central hub for SIM-swapping operations where participants used phishing to capture credentials from wireless provider employees. Attackers could then redirect phone numbers to their own devices. That's how they'd intercept secure codes required for multi-factor authentication.

The mechanics of the fraud

But there is a catch. These attacks were not limited to simple credential theft.

One specific technique involved the sale of fraudulent emergency data requests. Using compromised government and police email addresses, the hackers demanded sensitive subscriber information from tech giants while framing these requests as life-or-death situations to bypass standard legal requirements. It's a dangerous scam. But the criminals didn't stop there , they exploited trust.

Broader legal consequences

The legal net is tightening around the entire collective. Other participants have already faced substantial sentencing.

What happens next

Justice is slow. But Flowers and Jubair still await their July 15, 2026 sentencing hearing, while other group members face ongoing prosecution across multiple cases, and it's clear that Jubair is also wanted by law enforcement agencies in that country for his alleged role in a wide array of computer and wire fraud schemes.

It's a moment of accountability. This resolution marks the end for a group that spent years operating in the shadows, but now the focus shifts to the sentencing phase where their final legal tally will be determined.