Teen hackers who live streamed cyber-attack on TfL jailed

Sincity Press Staff 3 hours ago 11 min read 3
Sincity Press Brief

Owen Flowers and Thalha Jubair were convicted for their roles in the attack, which led to large costs for Transport for London.

We need to rewrite the article as original SinCity Press journalism, preserving all facts, names, dates, numbers, and quotes exactly. Use professional journalism tone, vary sentence structure. Output only the rewritten article, no preface, commentary, notes, no reporter contact info, etc. We need to keep the content same but rewrite sentences. Must preserve quotes exactly. Must keep numbers, names, dates. Must keep hyperlinks? Probably we should preserve the URLs as they appear, but they are part of the text; we can keep them as is. Must not add new info. We need to rewrite the article, varying sentence structure, but not altering facts. Let's parse the original article content. Original article includes: - Title: Teen hackers who live streamed cyber-attack on TfL jailed - Body: Two men who carried out a cyber-attack which crippled Transport For London (TfL) while they were teenagers have been sentenced to 5 years and six months in prison. - Owen Flowers, 18, from Walsall, and Thalha Jubair, 20, from east London, pleaded guilty in June to carrying out the hack in 2024. - They were described as computer-obsessed loners who carried out the hack as part of the cyber crime corporation known as Scattered Spider. - The cyber-attack disrupted TfL's online services for months, stole the personal information of millions of people and left each of 27,000 TfL employees needing to reset their passwords in person. - Woolwich Crown Court heard the criminals streamed their 16 hour long cyber-attack online. - The National Crime Agency (NCA) said the emergence of young hackers in the UK as 1 of the biggest threats to the nation's cyber security. - Flowers was 17 and Jubair was 18 when they hacked into the capital's transport authority at 1700 on 31 August. - Telegram messages sent between the pair showed them boasting about gaining entry to TfL's database of people with Oyster cards. - The teens then searched the database for the personal details of London celebrities, earlier attempting to access banking details. - "Scattered Spider is creating webs on the London Underground," Flowers would later gag - referring to the loosely coordinated group of young English-speaking hackers. - The group has been linked to dozens of different cyber-attacks including on retailers Marks and Spencer and the Co-op. - In the past 2 years young men and boys have been arrested for Scattered Spider hacks in the UK, US and Finland. - Subheadline: Impersonating an employee - The TfL hack saw the information of millions of customers stolen in a spree which started on a Saturday nighttime to maximise their chances of not being discovered by staff. - As revealed by the BBC, the database is still being shared in crime groups and contains the details of as many as 10 million TfL customers. - Jubair and Flowers who both have autism, gained entry to the information by tricking a telephone assistance desk worker. - They convinced the individual to reset the password of an employee they were impersonating. - TfL was alerted to the breach by the NCA and worked to boot the hackers out - but not before the criminals gained the details of millions of people. - The transport authority said the hack could have caused widespread disruption had its IT team not stopped the hackers by logging out each unit - and yet disconnecting TfL systems from the internet. - In total, 148 IT systems became inoperable and heavily disrupted services including Dial-a-ride - used by disabled and vulnerable Londoners. - TfL says the hack cost it £29m (revised down from £39m previously). - Woolwich Crown Court heard both men were loners who had fewer offline friends, and spent most of their time online unsupervised. - Image description etc. - Police said Flowers rarely left his home and spent most of his time in his bedroom using his computer. - As previously revealed by the BBC, he had first been given a cease and desist notice for minor cyber crime in October 2023 soon after he turned 16. - A few months later the teenager, who was living with his grandma and uncle, committed a series of cyber offences. - Flowers was yet arrested in September 2024 in transportation with the TfL attack. - Video of his apprehension shows the teen laughing as he is taken into custody. - In the apprehension raid, investigators caught Flowers in the act of hacking 2 US healthcare providers. - Messages he sent showed him joking about the hacks possibly "killing a 90-year-old on life support". - He pleaded guilty to offences relating to those hacks, on with the TfL cyber-attack. - Police also seized cryptocurrency holdings worth about £1m. - Although Flowers and Jubair were said to have accumulated millions of pounds in stolen or ransomed cryptocurrency, police say their motives were likely about online notoriety rather than financial gain. - Like Flowers, Jubair had been known to police for years. - The tribunal heard the lone kid was given his first laptop at the age of 10 by his parents - carers who moved to London from Bangladesh. - He learned how to code and by the age of 13 had begun interacting with criminals online. - He was first arrested in February 2021 at the age of 14. - In 2023, while still a juvenile, he received a Youth Rehabilitation Order for hacking with the Lapsus$ cyber crime group, which targeted large companies including Nvidia and BT. - Because he was under 18, his identity could not be reported at the time. - Jubair has 22 former convictions related to hacking, fraud and harassment. - His defence team claimed in court the lonely and suicidal teen was effectively groomed by older cyber criminals. - He is also wanted in the US in connection with cyber crimes against 47 US-based victims which allegedly led to $115 million paid in ransoms to Jubair and his associates. - Jubair became a high-profile hacker in the community of English-speaking cyber crime known as The Com. - But a falling out led to his personal details and images being leaked online by rival hackers. - Some of the videos appear to show Jubair seemingly being held hostage and beaten but there is simply a proposition this was staged by the wealthy criminal. - Woolwich Crown Court heard that whilst in custody awaiting trial, both Jubair and Flowers were discovered with contraband phones. - Recovered messages show the men continuing to discuss and coordinate future cyber-attacks. - After the sentencing NCA deputy manager Paul Foster, head of its National Cyber Crime Unit, said the lawsuit highlighted the challenges posed by homegrown hackers. - "The online world can expose young people to harmful influences and crime communities far beyond their front door," he said. - "Parents, carers, educators, technology companies and law enforcement, the whole of society, we each have a role to play in helping to keep young people safe online." - He claimed Scattered Spider was "heavily degraded and disrupted" as a result of the arrests, but cyber security expert Allison Nixon said it would do little to deter young boys from cyber crime. - "Policymakers need to treat this as a violent youth gang problem, with a gang culture that idolizes the destruction of society and maximising unfortunate harm," she said. We need to rewrite preserving all facts, names, dates, numbers, and quotes exactly. We must keep quotes exactly as they appear, including punctuation inside quotes. We must not alter any numbers like 5 years and six months, 2024, 18, 20, 1700, 31 August, 16 hour long, 27,000, 10 million, £29m, £39m, 148 IT systems, etc. We must preserve hyperlinks as they appear? Probably keep them as is. We need to vary sentence structure: combine, split, reorder clauses but keep same info. We must not add any new info. We must not include reporter contact info etc. We'll produce a single article with headings? The original had title, subheadline, etc. We'll keep those but rewrite the text. Let's rewrite. We'll start with title: maybe keep same? It says "Teen hackers who live streamed cyber-attack on TfL jailed". We can keep that as title. Then body paragraphs. We'll need to preserve quotes exactly: e.g., "Scattered Spider is creating webs on the London Underground," Flowers would later gag - referring to the loosely coordinated group of young English-speaking hackers. Also quotes from Paul Foster and Allison Nixon. We must keep those quotes exactly. Let's rewrite. We'll go paragraph by paragraph. Paragraph 1: Two men who carried out a cyber-attack which crippled Transport For London (TfL) while they were teenagers have been sentenced to 5 years and six months in prison. We can rephrase: Two teenagers who launched a cyber-attack that crippled Transport for London (TfL) have each received a sentence of five years and six months imprisonment. But need to keep numbers exactly: 5 years and six months. So "five years and six months". Keep. Paragraph 2: Owen Flowers, 18, from Walsall, and Thalha Jubair, 20, from east London, pleaded guilty in June to carrying out the hack in 2024. We can reorder: In June, Owen Flowers, aged 18 and from Walsall, and Thalha Jubair, aged 20 and from east London, pleaded guilty to conducting the 2024 hack. Paragraph 3: They were described as computer-obsessed loners who carried out the hack as part of the cyber crime corporation known as Scattered Spider. We can rephrase: Described as computer‑obsessed loners, the pair executed the breach as members of the cyber‑crime outfit Scattered Spider. Paragraph 4: The cyber-attack disrupted TfL's online services for months, stole the personal information of millions of people and left each of 27,000 TfL employees needing to reset their passwords in person. We can rephrase: The attack knocked out TfL’s online services for months, harvested the personal data of millions of users, and forced all 27,000 TfL staff to reset their passwords face‑to‑face. Paragraph 5: Woolwich Crown Court heard the criminals streamed their 16 hour long cyber-attack online. We can rephrase: Woolwich Crown Court was told that the offenders broadcast their sixteen‑hour assault live on the internet. Paragraph 6: The National Crime Agency (NCA) said the emergence of young hackers in the UK as 1 of the biggest threats to the nation's cyber security. We need to keep the quote? Actually it's not a quote, it's a statement. Keep same meaning but vary sentence. Paragraph 7: Flowers was 17 and Jubair was 18 when they hacked into the capital's transport authority at 1700 on 31 August. We can rephrase: At 1700 on 31 August, Flowers, then 17, and Jubair, then 18, infiltrated London’s transport authority. Paragraph 8: Telegram messages sent between the pair showed them boasting about gaining entry to TfL's database of people with Oyster cards. We can rephrase: Telegram exchanges between the duo revealed them bragging about accessing TfL’s Oyster‑card holder database. Paragraph 9: The teens then searched the database for the personal details of London celebrities, earlier attempting to access banking details. We can rephrase: Afterward, they combed the database for the personal details of London celebrities, having previously tried to obtain banking information. Paragraph 10: "Scattered Spider is creating webs on the London Underground," Flowers would later gag - referring to the loosely coordinated group of young English-speaking hackers. We must keep the quote exactly: "Scattered Spider is creating webs on the London Underground," Flowers would later gag - referring to the loosely coordinated group of young English-speaking hackers. We can embed that. Paragraph 11: The group has been linked to dozens of different cyber-attacks including on retailers Marks and Spencer and the Co-op. We can rephrase: The outfit has been tied to dozens of other cyber‑attacks, among them incidents at Marks & Spencer and the Co‑op. Paragraph 12: In the past 2 years young men and boys have been arrested for Scattered Spider hacks in the UK, US and Finland. We can rephrase: Over the last two years, arrests of young men and boys linked to Scattered Spider have occurred in the United Kingdom, the United States and Finland. Paragraph 13: Subheadline: Impersonating an employee (keep as subheadline). Paragraph 14: The TfL hack saw the information of millions of customers stolen in a spree which started on a Saturday nighttime to maximise their chances of not being discovered by staff. We can rephrase: The TfL breach began on a Saturday night, a timing chosen to reduce the likelihood of detection by staff, and resulted in the theft of millions of customers’ data. Paragraph 15: As revealed by the BBC, the database is still being shared in crime groups and contains the details of as many as 10 million TfL customers. We can rephrase: According to the BBC, the database continues to circulate among criminal circles and holds the details of up to ten million TfL patrons. Paragraph 16: Jubair and Flowers who both have autism, gained entry to the information by tricking a telephone assistance desk worker. We can rephrase: Both Jubair and Flowers, who have autism, obtained the data by deceiving a telephone‑helpdesk employee. Paragraph 17: They convinced the individual to reset the password of an employee they were impersonating. We can rephrase: They persuaded that worker to reset the password of an employee whom they were impersonating. Paragraph 18: TfL was alerted to the breach by
Read Entire Article