UK Citizen Arrested in Spain for Hacking US Companies

A 22-year-old British national has been arrested in Spain for allegedly hacking into dozens of US companies, according to a joint operation by Spanish authorities and the FBI. The suspect, who remains unnamed by authorities, was detained at Palma de Mallorca airport while attempting to board a flight to Naples. This arrest is part of a coordinated operation between Spanish police and the FBI, highlighting the ongoing efforts to combat international cybercrime.

TechCrunch alleged that the hacker is the leader of the notorious "Scattered Spider" group, also known as "0ktapus," and is believed to have orchestrated several high-profile cyberattacks, including the Twilio hacks in 2022.

The hacker group used phishing techniques to steal login credentials from over 45 US companies, allowing them to access sensitive information and cryptocurrency wallets. The suspect allegedly controlled approximately 391 bitcoins at the time of his arrest, worth over $27 million.

The Hacker News reported that the suspect, identified by security journalist Brian Krebs as Tyler Buchanan, specialized in SIM-swapping attacks. These attacks involve transferring a target's phone number to a SIM under the attacker's control to intercept messages, including one-time passwords, allowing the individual to take over online accounts.

The wider Scattered Spider group has recently moved from credential harvesting and SIM swapping to more sophisticated tactics like ransomware and data theft extortion. In 2023, the group played a role in a paralyzing cyberattack on MGM Resorts, which disrupted operations across several properties in Las Vegas and resulted in significant financial losses.

Spanish police confirmed the arrest in a press release, stating that the investigation began in late May when the FBI's Los Angeles office requested assistance in locating the suspect. The suspect entered Spain through Barcelona's El Prat airport and was apprehended in Palma as he prepared to leave the country.

This arrest follows the January detention of another Scattered Spider member, Noah Urban, a resident of Florida. He has been charged with multiple counts of wire fraud, identity theft, and conspiracy. While significant steps have been made, the collective nature of these cybercrime organizations continues to present significant challenges for law enforcement.