Scattered Spider affiliate given ten year sentence and ordered to pay $13 million to victims.
A member of Scattered Spider was sentenced to a decade-long imprisonment by a U.S. federal judge, months after admitting guilt to several charges of cryptocurrency and sensitive corporate data theft.
Noah Michael Urban had been given three years of supervised release within the jail term, and has also been compelled to provide $13 million in restitution to the victims of attacks conducted by his team, which have resulted in losses ranging from $9.5 million to $25 million, reports The Record.
Intrusions from August 2022 to March 2023 involved the distribution of malicious SMS phishing messages to targeted corporate employees, with pilfered credentials then used to access their accounts, companies' systems, and exfiltrate cryptocurrency, according to Urban's plea deal. Such a development follows a momentary pause in Scattered Spider activity following the arrests of alleged members in the UK.
Written by
Dan Raywood is a B2B journalist with 25 years of experience, including covering cybersecurity for the past 17 years. He has extensively covered topics from Advanced Persistent Threats and nation-state hackers to major data breaches and regulatory changes.
He has spoken at events including 44CON, Infosecurity Europe, RANT Forum, BSides Scotland, Steelcon and the National Cyber Security Show, and served as editor of SC Media UK, Infosecurity Magazine and IT Security Guru. He was also an analyst with 451 Research and a product marketing lead at Tenable.
