Scattered Spider Hackers Plead Guilty on Day 1 of Trial
Two members of the cybercrime group Scattered Spider pleaded guilty in the UK on the first day of their trial for their roles in the August 2024 cyberattack that crippled Transport for London, the agency overseeing Greater London's public transport network.
Background
- **Scattered Spider** (also called UNC3944 or 0ktapus) is a loose, financially motivated cybercriminal group known for sophisticated social engineering — tricking employees at companies into giving up passwords or approving multi-factor authentication requests. They have targeted major tech firms (e.g., Uber, Caesars Entertainment, MGM Resorts) and are unusual for being primarily young, native English speakers from the US and UK.
- **Transport for London (TfL)** is the government body that runs London's buses, Underground (Tube), trams, and major roads. The August 2024 attack disrupted Oyster card top-ups, contactless payments, refunds, and real-time travel apps for weeks, and exposed some customer bank account data.
- The guilty pleas on day one of a scheduled six-week trial signal a strong prosecution case and likely cooperation deals or plea bargains, potentially implicating higher-level members of the group. The trial was expected to be a landmark case in UK cybercrime law.