Scattered Spider Hacker Sentenced to 10 Years and $13M Restitution for SIM Swapping Scheme
In a significant development within the realm of cybercrime, a 20-year-old associate of the infamous hacking collective known as Scattered Spider has been sentenced to ten years in federal prison for his involvement in a series of high-profile hacks aimed at cryptocurrency theft. Noah Michael Urban, who also operated under multiple aliases including Sosa and Gustavo Fring, pleaded guilty to charges of wire fraud and aggravated identity theft in April 2025.
The sentencing, reported by Bloomberg and local news outlet News4JAX, marks a crucial moment in combating financial crimes enabled by digital vulnerabilities. In addition to his decade-long prison term, Urban is subject to three years of supervised release and has been ordered to pay $13 million in restitution to the victims affected by his criminal activities.
Urban’s illicit actions spanned from August 2022 to March 2023, during which he orchestrated significant exploits, leading to the theft of at least $800,000 in cryptocurrency. Arrested by U.S. authorities in Florida in January 2024, Urban’s case illustrates the growing threat posed by cybercriminal groups that use sophisticated tactics to exploit both individuals and businesses.
In his statement, Urban referred to the sentence as unjust, a sentiment that highlights the complexities of criminal prosecution in the digital age. However, this sentiment does not diminish the seriousness of the offenses committed, which were facilitated through methods commonly associated with SIM swapping—a tactic that allows hackers to gain control of victims’ phone numbers and, ultimately, their online accounts.
The techniques employed in Urban’s attacks align with several tactics outlined in the MITRE ATT&CK framework. Initial access may have been achieved through social engineering or direct victim engagement, allowing the attackers to exploit trust and gain control over targeted systems. Persistence could have been established via secondary accounts or backdoors, while privilege escalation tactics may have enabled Urban to access sensitive information or execute unauthorized transactions.
This case serves as a stark reminder for business owners and cybersecurity professionals alike about the vulnerabilities associated with digital communications and the significant risks posed by criminal organizations like Scattered Spider. As cyber threats continue to evolve, the importance of implementing robust security measures, employee training, and ongoing vigilance cannot be overstated.
Ultimately, Urban’s sentencing underscores the pressing need for a concerted effort within the tech industry and beyond to fortify defenses against such evolving cyber threats. As authorities increase their focus on cybercrime, incidents like this signal a potential shift towards accountability and deterrence in the dark world of online criminal activity.