Cybercrime Group Scattered Spider Member Pleads Guilty to Major Charges

TL;DR

Noah Urban, a 20-year-old member of the Scattered Spider cybercrime group, has pleaded guilty to conspiracy, wire fraud, and identity theft charges in Florida and California. His activities involved stealing cryptocurrency and conducting sophisticated phishing operations, causing significant financial and emotional damage to victims.

Main Content

Scattered Spider Member Pleads Guilty

Noah Urban, a 20-year-old from Palm Coast, has pleaded guilty to multiple charges related to his involvement with the Scattered Spider cybercrime group, also known as UNC3944 and 0ktapus. The charges include conspiracy, wire fraud, and identity theft, spanning cases in both Florida and California¹.

Details of the Charges

In the California case, Urban admitted to one count of conspiracy to commit wire fraud. In Florida, he was accused of stealing at least $800,000 in cryptocurrency from five victims between August 2022 and March 2023².

Source: News4Jax

Group’s Extensive Cybercrime Operations

Scattered Spider is suspected of hacking into hundreds of organizations over the past two years, including high-profile targets such as Twilio, LastPass, DoorDash, and Mailchimp. The group is part of a larger cybercriminal community known as “The Com,” which often uses social engineering tactics to gain access to corporate networks³.

Arrest and Plea Agreement

Urban, known online as “Sosa” and “King Bob,” was arrested in January 2024. He initially pleaded not guilty but later entered a plea deal, admitting to the charges in both California and Florida. As part of his plea agreement, Urban has agreed to pay approximately $13 million in restitution to the victims⁴.

SIM Swapping and Cryptocurrency Theft

Prosecutors revealed that Urban and his co-conspirators used SIM swapping to reset victims’ crypto account passwords and steal funds. This method involves taking control of a victim’s phone number to bypass security measures⁵.

Impact on the Music Industry

Urban’s hacking activities extended to the music industry, where he leaked unreleased tracks from prominent artists such as Playboi Carti, Ariana Grande, and Lil Uzi Vert. These leaks disrupted album plans and caused significant financial and emotional damage to the artists⁶.

Sentencing and Future Implications

Urban faces a lengthy prison term, with an additional sentence for aggravated identity theft. This case highlights the real-world impact of cybercrime and the importance of robust cybersecurity measures to protect both individuals and organizations⁷.

Conclusion

The plea agreement of Noah Urban underscores the seriousness of cybercrime and the extensive reach of groups like Scattered Spider. As cyber threats continue to evolve, it is crucial for both individuals and organizations to stay vigilant and implement strong security measures to protect against such attacks.

Additional Resources

For further insights, check:

• Security Affairs
• Krebs on Security

References

1. News4Jax (2025). “Palm Coast man linked to Scattered Spider cybercrime gang pleads guilty to charges related to cryptocurrency theft”. News4Jax. Retrieved 2025-04-07. ↩︎

2. Security Affairs (2025). “Scattered Spider cybercrime group member pleaded guilty”. Security Affairs. Retrieved 2025-04-07. ↩︎

3. Security Affairs (2023). “0ktapus phishing campaign”. Security Affairs. Retrieved 2025-04-07. ↩︎

4. News4Jax (2025). “Palm Coast man linked to Scattered Spider cybercrime gang pleads guilty to charges related to cryptocurrency theft”. News4Jax. Retrieved 2025-04-07. ↩︎

5. Security Affairs (2024). “Spanish police member Scattered Spider”. Security Affairs. Retrieved 2025-04-07. ↩︎

6. Hypefresh (2025). “Infamous music leaker King Bob pleads guilty after leaking songs from Playboi Carti, Ariana Grande”. Hypefresh. Retrieved 2025-04-07. ↩︎

7. Krebs on Security (2024). “Fla. man charged in SIM swapping spree is key suspect in hacker groups Oktapus, Scattered Spider”. Krebs on Security. Retrieved 2025-04-07. ↩︎