Scattered Spider: Core member sentenced to 10 years in prison

A 20-year-old manidentified as a key member of the 'Scattered Spider' has been sentenced to 10 years in prison. Noah Michael Urban of Palm Coast, Florida, was also ordered to pay about $13 million in restitution to victims of his attacks.

In April 2025, Urban pleaded guilty to conspiracy to commit wire fraud. Florida prosecutors described how he and his associates managed to steal at least $800,000 from five people through sophisticated attacks SIM-swapping.

These attacks allowed the group to take control of victims' mobile phone numbers, intercepting calls and text messages, including one-time codes and two-factor authentication codes, thereby gaining unauthorized access to bank accounts and crypto wallets.

See also: Scattered Spider carries out massive attack on VMware ESXi

Scattered Spider: Core member imprisoned

The conviction is a significant development in the ongoing investigation into Scattered Spider, a group known for its highly effective and aggressive social engineering tactics. According to court documents from related cases, the group's operations extended far beyond isolated SIM-swapping attacks, targeting dozens of large companies to harvest employee credentials and sensitive customer data.

The group’s typical method involved sending phishing messages via SMS to company employees. The messages often appeared as urgent security alerts. These messages directed victims to specially crafted phishing websites that mimicked legitimate company login pages (e.g., Okta). Once an employee entered their credentials, the attackers would capture them and use them to infiltrate the company’s internal systems.

See also: Russian Static Tundra exploits old Cisco vulnerability

After gaining access, the cybercriminals had access to customer information, which they then used to target individuals for cryptocurrency theft. By combining the stolen data with SIM-swapping techniques, Scattered Spider was able to bypass security measures and empty victims’ cryptocurrency wallets. Federal investigators have linked the group to the theft of millions of dollars (in digital assets) from numerous victims across America.

The investigation into Scattered Spider has uncovered a complex and organized criminal enterprise that has targeted at least 45 companies in the U.S. and internationally. The group is said to have recruited young individuals with high technical skills, taking advantage of the ease with which one can obtain hacking tools and carry out attacks from the comfort of their own homes. This combination of technical training, anonymity, and financial incentive creates an ideal mechanism for mass attacks.

Urban's conviction is the first among recognized members of the group and represents a significant success for authorities' efforts to dismantle these cybercrimes.

See also: Rapper Bot: Botnet shut down & charges against administrator

The imprisonment serves as a warning, both to the members of the group and to other similar criminal organizations. It shows that the authorities are willing to invest in complex investigations, often with international cooperation, to identify and dismantle such groups. At the same time, the case highlights the need for more advanced security measures, such as the use of hardware-based authentication instead of SMS 2FA, as well as the continuous training of employees on cybersecurity issues.

The financial dimension of the case is equally significant. With losses reaching tens of millions of dollars, such groups threaten not only individuals but also the stability of companies and markets. Especially in the cryptocurrency space, where transactions are difficult to reverse, attacks of this type can prove devastating.

Urban’s conviction may be just the beginning of a series of prosecutions targeting Scattered Spider. It sends a clear message: the era of impunity for cybercriminals is coming to an endas the international community increasingly invests in addressing these threats.