/
← Voltar ao feed
medium transportation government

UK courts sentence Scattered Spider members over TfL hack and convict teenagers in Com sextortion and terrorism cases

1 fonte(s) · 1 atualização(ões) · publicado 21/10/2026 06:00 · coletado há 3 dias

A BushidoToken journal entry reviews four 2026 UK prosecutions involving teenage offenders at the intersection of cybercrime and online extremism. In July 2026, Thalha Jubair (20) and Owen Flowers (18), part of the Scattered Spider collective, were each sentenced to five years and six months for the late August 2024 breach of Transport for London (TfL). In August 2026, Justin Swaddle (20), a member of The Com, was sentenced to two years for blackmailing 117 female victims aged 13-17. Two further cases, Yusuf Shah and Shuja Gibraeel Mohsin, were convicted under the Terrorism Act 2000. Shah offered cyber capabilities to proscribed terrorist groups, and Mohsin consumed and shared extremist material.

Detalhes técnicos

  • The TfL intrusion was prosecuted under Section 3ZA of the Computer Misuse Act, which covers serious damage to critical national infrastructure. Flowers was 17 when it began.
  • The attackers bypassed two-factor authentication (2FA) by social engineering a TfL help-desk worker over the phone.
  • Impact: 148 internal IT systems knocked offline, in-person password resets for 27,000 staff, up to 10 million customer records exposed, and £29-39 million in operational and recovery costs.
  • Swaddle operated under the aliases "Epstein" and "Moscow" on Telegram, Discord and Snapchat, using doxxing threats and intimate images to coerce victims into self-harm and sexual abuse.
  • Shah authored a manual titled "A Guide on Cybersecurity" for Tehrik-e-Taliban Pakistan (TTP) and facilitated an untraceable $1,376.51 cryptocurrency donation to Al-Qaeda using privacy techniques he developed.
  • Mohsin was stopped at Heathrow in January 2024. His devices held a bomb-making manual and Daesh execution videos.

Remediação

  • Harden help-desk identity verification and password and 2FA reset procedures against voice-based social engineering.
  • Refer youth showing advanced technical aptitude alongside anti-social behavior to the NCA Cyber Choices program, and use the ACT Early reporting framework for radicalisation.
  • Expand digital literacy in schools to cover gamified cybercrime and sextortion subcultures.
  • Platforms such as Telegram, Discord and Snapchat should cooperate with law enforcement on rapid takedowns and identification of offenders.

Linha do tempo

  1. blog.bushidotoken.net ↗ · pub. 21/10/2026 06:00 · coletado 21/10 06:01 primeiro registro

    UK courts sentence Scattered Spider members over TfL hack and convict teenagers in Com sextortion and terrorism cases

    ler a análise desta fonte

    A BushidoToken journal entry reviews four 2026 UK prosecutions involving teenage offenders at the intersection of cybercrime and online extremism. In July 2026, Thalha Jubair (20) and Owen Flowers (18), part of the Scattered Spider collective, were each sentenced to five years and six months for the late August 2024 breach of Transport for London (TfL). In August 2026, Justin Swaddle (20), a member of The Com, was sentenced to two years for blackmailing 117 female victims aged 13-17. Two further cases, Yusuf Shah and Shuja Gibraeel Mohsin, were convicted under the Terrorism Act 2000. Shah offered cyber capabilities to proscribed terrorist groups, and Mohsin consumed and shared extremist material.

    Technical Details

    • The TfL intrusion was prosecuted under Section 3ZA of the Computer Misuse Act, which covers serious damage to critical national infrastructure. Flowers was 17 when it began.
    • The attackers bypassed two-factor authentication (2FA) by social engineering a TfL help-desk worker over the phone.
    • Impact: 148 internal IT systems knocked offline, in-person password resets for 27,000 staff, up to 10 million customer records exposed, and £29-39 million in operational and recovery costs.
    • Swaddle operated under the aliases "Epstein" and "Moscow" on Telegram, Discord and Snapchat, using doxxing threats and intimate images to coerce victims into self-harm and sexual abuse.
    • Shah authored a manual titled "A Guide on Cybersecurity" for Tehrik-e-Taliban Pakistan (TTP) and facilitated an untraceable $1,376.51 cryptocurrency donation to Al-Qaeda using privacy techniques he developed.
    • Mohsin was stopped at Heathrow in January 2024. His devices held a bomb-making manual and Daesh execution videos.

    Remediation

    • Harden help-desk identity verification and password and 2FA reset procedures against voice-based social engineering.
    • Refer youth showing advanced technical aptitude alongside anti-social behavior to the NCA Cyber Choices program, and use the ACT Early reporting framework for radicalisation.
    • Expand digital literacy in schools to cover gamified cybercrime and sextortion subcultures.
    • Platforms such as Telegram, Discord and Snapchat should cooperate with law enforcement on rapid takedowns and identification of offenders.