A 20-year-old Florida man has pleaded guilty to a series of cybercrimes tied to the hacking group known as Scattered Spider. The accused, Noah Urban from Palm Coast, was arrested in January 2024. His charges were unsealed in November, alongside four other suspected members of the group.
Authorities believe Urban operated under online aliases like “Sosa,” “Elijah,” and possibly “King Bob.” He’s now admitted guilt to conspiracy to commit wire fraud, wire fraud itself, and aggravated identity theft. His crimes took place across both California and Florida, prompting coordinated legal action.
Scattered Spider, also known as Starfraud, UNC3944, and Scatter Swine, has targeted major corporations. One of the most high-profile victims was MGM Resorts, a global hospitality and entertainment firm. Investigators also connect the group to the 0ktapus campaign, an SMS-based phishing scheme that struck many businesses.
Urban wasn’t acting alone. He and others in their early twenties launched phishing attacks that led to the theft of millions in cryptocurrency. These attacks often used SIM-swapping tactics. This involves tricking mobile providers into transferring someone’s phone number to a SIM card controlled by the attacker. Once done, they bypass two-factor authentication and access sensitive accounts.
Though Urban initially denied the charges, he has now accepted a plea deal. Court documents confirm he’s agreed to pay $13 million to 59 victims. That figure was reported by News4Jax, a Florida news outlet.
Urban is also linked to music industry leaks. According to journalist Brian Krebs, Urban—possibly as “King Bob”—used SIM-swapping to target individuals with unreleased tracks. These songs were then leaked online, sparking attention and controversy in the entertainment world.
Scattered Spider has members across the U.S., UK, and parts of Eastern Europe. Some suspects, particularly in the West, left digital trails that made it easier for investigators to track them down. Their failure to stay anonymous ultimately helped authorities build their case.
Urban’s guilty plea marks a significant step in the crackdown on cybercrime rings. It also highlights how vulnerable even top-tier systems can be when targeted by persistent and tech-savvy criminals.
