NEWARK, NJ – A criminal complaint unsealed in the District of New Jersey charges Thalha Jubair, a 19-year-old United Kingdom national, with conspiracy to commit computer fraud, wire fraud, and money laundering. The charges stem from a cyber extortion campaign linked to at least 120 network intrusions, including attacks on U.S. critical infrastructure and the federal court system.
According to the complaint, Jubair—also known online as “EarthtoStar,” “Brad,” “Austin,” and “@autistic”—acted as a key member of a cybercriminal group known by various aliases, including “Scattered Spider,” “Octo Tempest,” and “0ktapus.” Between May 2022 and September 2025, Jubair and his co-conspirators allegedly used social engineering tactics to gain unauthorized access to computer networks, encrypt stolen data, and demand ransom payments to prevent public disclosure. At least 47 U.S. entities were affected, and victims collectively paid more than $115 million in ransom.
Jubair also conspired to launder proceeds from the scheme. Prosecutors allege that he controlled a server hosting cryptocurrency wallets linked to ransom payments. In July 2024, during a law enforcement seizure operation, Jubair allegedly transferred $8.4 million in cryptocurrency to a separate wallet to evade seizure. Authorities had already seized approximately $36 million in digital assets at that time.
The complaint outlines Jubair’s role in cyberattacks on a U.S.-based critical infrastructure company and the U.S. Courts in October 2024 and January 2025. On September 16, U.K. authorities arrested Jubair and a second individual in connection with a separate investigation involving U.K. critical infrastructure.
Jubair is charged with one count of computer fraud conspiracy, two counts of computer fraud, one count of wire fraud conspiracy, two counts of wire fraud, and one count of money laundering conspiracy. If convicted, he faces a maximum penalty of 95 years in prison.
The case is being investigated by the FBI’s Newark Field Office. Authorities from the United Kingdom, the Netherlands, Romania, Canada, and Australia provided substantial assistance. The Justice Department’s Office of International Affairs also assisted.
The Justice Department’s Computer Crime and Intellectual Property Section (CCIPS) and the U.S. Attorney’s Office for the District of New Jersey are prosecuting the case.
