Thalha Jubair, one of the two UK teens arrested on Tuesday and accused of being members of the notorious Scattered Spider cybercrime gang, allegedly played a role in bilking more than 100 organizations out of at least $115 million in ransom payments. The cops nabbed him after following a number of clues, including paying for gift cards from a wallet on the same server that also held wallets receiving extortion payments.

Scattered Spider, a SIM-swapping turned social-engineering and ransomware group, has been around since at least 2022, and saw at least seven of its members arrested last year following the high-profile Las Vegas casino digital heists.