A British court this week handed down sentences to two hackers who admitted their role in a sprawling crypto ransom scheme that netted roughly $115 million. The men, whose names have not been publicly released, pleaded guilty after investigators linked them to the Scattered Spider cybercrime group. US prosecutors say the group extorted dozens of companies, using ransomware to lock up systems and demand payment in cryptocurrency.
What the pair admitted
Both defendants pleaded guilty to charges related to the ransomware operation. Court documents show the scheme targeted businesses across multiple sectors, including healthcare and finance. The hackers used phishing emails to gain access to corporate networks, then deployed ransomware that encrypted files. Victims were told to pay ransoms in Bitcoin or Monero to get their data back. The $115 million figure represents the total value of ransom payments traced to the group over several years.
How investigators caught them
British authorities worked with the FBI and Europol to track the digital trail. The break came when one victim paid a ransom that was later moved through a series of crypto wallets. Investigators linked those wallets to a UK-based server and, from there, to the two suspects. The pair were arrested in separate raids last year. Their guilty pleas came after prosecutors presented evidence of chat logs and transaction records tying them directly to the Scattered Spider group.
Scattered Spider's wider reach
Scattered Spider has been active since at least 2022, targeting mid-sized companies and municipal governments. US prosecutors say the group extorted victims in at least 12 states. The group is known for demanding ransoms in cryptocurrency and for using a variant of the LockBit ransomware. This case is one of the first successful prosecutions of Scattered Spider members outside the US. The sentencing in the UK could set a precedent for cross-border crypto crime cases.
What happens next
The two hackers are now serving prison terms. The exact length of their sentences hasn't been disclosed, but legal experts expect them to face at least a decade. Authorities are still investigating other members of the group. The UK's National Crime Agency said it will continue to pursue leads. The case also highlights the growing use of cryptocurrency in ransomware attacks and the need for international cooperation to track and prosecute offenders.
