Scattered Spider Hacker Gets 10 Years, $13M Restitution for SIM Swapping Crypto Theft

A 20-year-old member of the notorious Scattered Spider cybercrime group, Noah Michael Urban, has been sentenced to 10 years in federal prison and ordered to pay $13 million in restitution for his role in SIM-swapping attacks and cryptocurrency thefts. Urban, also known by aliases such as 'Sosa' and 'King Bob,' pleaded guilty to charges including conspiracy, wire fraud, and aggravated identity theft. His sentencing highlights the significant financial and emotional damage caused by sophisticated cybercriminal operations.

Key Takeaways

• Noah Michael Urban, 20, sentenced to 10 years in U.S. prison.

• Ordered to pay $13 million in restitution to victims.

• Convicted of conspiracy, wire fraud, and aggravated identity theft.

• Involved in SIM-swapping attacks to steal cryptocurrency.

• Linked to the broader Scattered Spider cybercrime group.

The Scattered Spider Syndicate

Scattered Spider, also known by other monikers like UNC3944 and 0ktapus, is a prolific cybercrime organization suspected of breaching over 130 organizations in recent years. Their targets have included major companies such as Twilio, LastPass, DoorDash, and Mailchimp. The group is known for employing social engineering tactics, including phishing, vishing, and SMS scams, to gain access to corporate networks and sensitive data.

Urban's Criminal Activities

Urban was arrested in January 2024 and subsequently pleaded guilty to federal charges in both Florida and California. Prosecutors detailed his involvement in stealing victims' personal information and using SIM swapping to reset cryptocurrency account passwords, leading to the theft of at least $800,000 from five victims between August 2022 and March 2023. His activities also extended to leaking unreleased music from artists like Playboi Carti and Ariana Grande, causing significant disruption and financial loss to the music industry.

Sentencing and Restitution

Despite prosecutors recommending eight years and the defense requesting five, a federal judge imposed a 120-month prison sentence on Urban. The judge also mandated $13 million in restitution to victims, a figure that includes payments to some individuals not directly tied to his admitted offenses, a concession Urban agreed to. Urban expressed his dissatisfaction with the sentence, arguing that the judge overlooked his age as a mitigating factor, and alleged bias due to another Scattered Spider member hacking the judge during his case.

Broader Cybercrime Landscape

Scattered Spider members are part of a larger cybercriminal community known as "The Com," where hackers openly discuss and boast about their illicit activities. The group's tactics are characterized by creating urgency, generating media attention, and instilling fear of exposure to expedite payouts from victims. Cybersecurity experts note that Scattered Spider's success often stems from targeting people through social engineering, demonstrating that even advanced technical defenses can be bypassed through human deception. The group has also been observed to consolidate with other threat actors, such as ShinyHunters and LAPSUS$, in response to increased law enforcement pressure, forming more versatile and dangerous combined operations.

As cyber threats become increasingly sophisticated, your security strategy must evolve to keep pace. BetterWorld Technology offers adaptive cybersecurity solutions that grow with the threat landscape, helping your business stay secure while continuing to innovate. Reach out today to schedule your personalized consultation.

Sources

• A Scattered Spider member gets 10 years in prison, Security Affairs.

• Cybercriminal Linked to Scattered Spider Gang Gets 10-Year Sentence, Infosecurity Magazine.