ALLEGED SCATTERED SPIDER MEMBER EXTRADITED TO UNITED STATES TO FACE FEDERAL CYBERCRIME CHARGES

CHICAGO, Ill. — A 19-year-old dual citizen of the United States and Estonia has been extradited from Finland to the United States to face federal criminal charges alleging his involvement with the cybercriminal group known as Scattered Spider, according to the U.S. Department of Justice.

Federal prosecutors announced Wednesday that Peter Stokes, 19, has been charged by criminal complaint with conspiracy, unauthorized computer intrusion, and fraud. Stokes was arrested by Finnish authorities in April pursuant to an Interpol Red Notice before being extradited to the United States last week. He made his initial appearance Tuesday in the U.S. District Court for the Northern District of Illinois, where a federal magistrate judge ordered him to remain in custody.

According to the criminal complaint, federal investigators allege Stokes was a member of Scattered Spider, a cybercriminal group also tracked by cybersecurity researchers under the names Octo Tempest, UNC3944, and 0ktapus. Authorities allege the organization has targeted numerous companies throughout the United States by using sophisticated social engineering techniques to gain unauthorized access to employee accounts before stealing sensitive data, deploying ransomware, or demanding cryptocurrency payments from victims.

Federal investigators allege members of the group routinely impersonated legitimate employees when contacting corporate information technology help desks, convincing personnel to reset passwords and modify multi-factor authentication credentials. Once access was obtained, prosecutors allege the attackers elevated privileges within victim networks, exfiltrated sensitive corporate data, and attempted to extort organizations by threatening to publish or encrypt the stolen information unless ransom demands were paid.

The criminal complaint alleges that Stokes participated in a May 2025 cyberattack targeting a luxury jewelry retailer identified only as Company F in court documents. According to prosecutors, the attackers gained unauthorized access to the company’s computer systems, stole sensitive data, and demanded approximately $8 million in cryptocurrency to prevent further exploitation or public release of the information.

Federal authorities said the retailer’s cybersecurity personnel successfully removed the attackers from the network before any ransom payment was made. Investigators estimate the company suffered at least $2 million in losses associated with business disruption, forensic investigations, incident response, and remediation efforts following the intrusion.

According to the Department of Justice, Scattered Spider has been linked to more than 100 network intrusions involving businesses across multiple industries. Federal authorities estimate the group’s operations have generated more than $100 million in ransom payments, while causing millions of additional dollars in financial losses related to operational disruptions, recovery efforts, and cybersecurity remediation.

Unlike many traditional cybercriminal organizations, Scattered Spider has become known for relying heavily on social engineering rather than exploiting software vulnerabilities alone. Investigators say members frequently target help desk personnel through telephone calls, phishing campaigns, credential theft, SIM-swapping attacks, and other methods designed to bypass security controls by manipulating employees into granting access.

The investigation was conducted by the Federal Bureau of Investigation’s Chicago Field Office with assistance from the FBI’s Copenhagen Legal Attaché Office. The Department of Justice’s Office of International Affairs coordinated with Finnish authorities to secure Stokes’ extradition, while Finland’s National Bureau of Investigation assisted throughout the investigation.

The case is being prosecuted by Assistant Deputy Chief Adrienne L. Rose of the Department of Justice’s Computer Crime and Intellectual Property Section (CCIPS) and Assistant U.S. Attorneys Jennifer Chang and Ann Marie Ursini for the Northern District of Illinois.

Federal authorities said the prosecution is part of Operation Riptide, an ongoing FBI initiative focused on identifying, disrupting, and dismantling cybercriminal organizations responsible for cyber intrusions, ransomware attacks, online fraud, and other cyber-enabled offenses targeting individuals and businesses throughout the United States.

Because the case was initiated through a criminal complaint, the allegations against Stokes have not been proven in court. He is presumed innocent unless and until proven guilty beyond a reasonable doubt.

🔥 NOW AVAILABLE! 🔥

‎👉 Eclipsera – Apple Music

Sponsored • TRJ Ads
Inquiries: contact@therealistjuggernaut.com

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE