Security
Scattered Spider members plead guilty to Transport for London cyberattack
Tags Security · Infrastructure
Krebs on Security·
Two key members of the Scattered Spider cybercrime group pleaded guilty on day one of trial for the August 2024 cyberattack on Transport for London, which disrupted transit systems and exposed passenger data.
Technical significance
The guilty plea provides insight into Scattered Spider's operational tactics including social engineering and MFA fatigue attacks. Security teams should use these documented techniques to strengthen identity verification procedures.