Scattered Spider Member Pleads Guilty in Multi-Million Dollar Virtual Currency Heist
A key member of the notorious Scattered Spider cybercrime group has pleaded guilty to charges related to a spree of extortion attacks and virtual currency theft totaling millions.
Ahmed Hossam Eldin Elbadawy, a 24-year-old from Texas, has pleaded guilty to wire fraud conspiracy and aggravated identity theft, marking a significant development in the ongoing prosecution of the Scattered Spider cybercrime outfit. His guilty plea, which occurred exactly one year prior to the public disclosure, was revealed through court records detailing prosecutors' efforts to seize proceeds from his criminal activities.
Elbadawy was a central figure within an aggressive subset of "The Com," a broader cybercriminal organization, known as Scattered Spider. This group specialized in sophisticated social engineering tactics to pilfer credentials and sensitive company data. Their primary targets were high-net-worth individuals, particularly those with substantial virtual currency holdings.
According to court documents, Elbadawy and his co-conspirators, including Noah Michael Urban and Tyler Robert Buchanan, systematically identified and exploited employees with access to valuable virtual currency accounts. The indictment against Elbadawy and others, filed in late 2024, outlined at least 12 victim companies, though authorities later detailed a total of 29 victims compromised by Elbadawy and his associates.
The financial impact of these attacks was staggering. Prosecutors linked Elbadawy's activities to the theft of virtual currency worth nearly $6.35 million in September 2021, $571,000 in June 2022, and an additional $1.7 million in December 2022. These figures represent only a portion of the total losses incurred by the victim organizations.
In their pursuit of illicit gains, the group targeted businesses across diverse sectors, including entertainment, telecommunications, technology, IT services, cloud computing, and virtual currency firms. The scale of the operation underscores the group's reach and their ability to penetrate various corporate environments.
As part of the legal proceedings, prosecutors are seeking substantial asset forfeiture from Elbadawy. This includes a significant amount of cryptocurrency, such as Bitcoin valued at over $14.19 million and Ethereum exceeding $3.4 million, alongside nearly $63,000 in cash. The forfeiture request also extends to luxury items, including vehicles, watches, jewelry, designer bags, and even a painting.
While Elbadawy's plea agreement terms remain undisclosed, his conviction highlights the federal government's continued efforts to dismantle sophisticated cybercrime networks. The FBI has described "The Com" as a sprawling organization with thousands of members, often young, operating in distinct subsets focused on various criminal activities, including extortion, swatting, and the distribution of illicit content.
The prosecution of Scattered Spider members, including Elbadawy, serves as a stark reminder of the evolving threat landscape and the persistent danger posed by financially motivated cybercriminal groups leveraging social engineering and advanced technical skills to perpetrate large-scale heists.