A 20 -year -old Florida is known as “at the center of a huge cyber crime group”Scattered spider“Today was sentenced to 10 years in the federal prison, and ordered the victims to pay around $ 13 million in reinstatement.
Noah Michael Urban Palm Coast, Fla. Defected in April 2025 for allegations of wire fraud and conspiracy. Florida’s prosecutors alleged that the urban conspired to steal at least $ 800,000 from five victims through a sim-swapping attacks, which used to twist their mobile phone calls and text messages for equipment controlled by urban and their co-scientists.

A booking photo of Noah Michael Urban released by Volusia County Sheriff.
Although prosecutors asked Urban to serve eight years, Jacksonville News Outlet News4jax.com Reports In this case, the federal judge today opted for a sentence of 120 months to the urban in the federal jail, ordered him to pay $ 13 million in reinstatement and was supervised for three years after his sentence was completed.
In November 2024, Urban was charged as one of the five members of the five members of Spider (aka “octapus,” octapus, “scatter swine” and “UNC3944” in Los Angeles, which was special in SMS and Voice Fishing attacks, which were specially entitled to the employees of the victims and once in passesials, the employees of the aggrieved companies. Used to include Passkods. Urban convicted a count of a conspiracy for wire fraud in the California case, and $ 13 million in restoration is aimed at covering suffering from both cases.
The targeted SMS scams spread for several months during the summer of 2022, asking the employees to click on a link and log on to a website, who copied his employer’s Okata authentication page. Some SMS fishing messages told the employees that their VPN credentials were ending and needed to replace them; Other missiles advised employees about changes in their upcoming work program.
That phishing spright provided access to more than 130 companies to urban and others Twilio, last pass, Doordash, MailchimpAnd PlexThe government says that the group used to steal the data and customer information of the ownership company, and that the members also inflated people to steal cryptocurrency of millions of dollars.
For many years, urban online hacker surname “King bob” And “Packed“COM had fixtures, mostly telegram and dysord-based communities of English-speaking cyber criminal, in which hackers boasted loudly about high-profile exploits and hacks, which almost always begins with social engineering.

Noah “King Bob” urban, today around the time of his sentence at the time of posting Twitter/X.
Sosa was also active in a particularly disastrous group of criminal sim-swappers known as “.Star fraud“AJ Visense of Cybercops stated in 2023 that the person inside the Star fraud was probably involved in high-profile Kaiser Entertainment and MGM Resorts Extortion attacks in the same year.
Star Fraud SIM-Swapping Group received the ability to temporarily transfer the targeted mobile number in the devices controlled by the frequent fishing staff of major mobile providers. In February 2023, Krebsonsecurity published data and two other sim-swapping groups taken from telegram channels for star fraud, which were focused on SIM-Swapping T-Mobile customers showing these miscreants, and they collectively claimed internal access to T-Momile in 2022 in 2022.
Arban arrived at Twitter/X through one of his King Bob accounts, saying the sentence unjust, and said that in his case the judge exempted his age as a factor.
In response to the questions, Urban said, “The judge objectively ignored my age as a factor because due to the fact that another scattered spider member had personally hacked her during my case.” “He should have been removed as a judge long ago. But living in the county jail is torture.”
A position hearing in February 2025 shows a court transport (PDF) that the Urban hacking was telling the truth about the incident that he was in federal custody. This included an intrusion in the email account of a magistrate judge, where a copy of the urban seal prosecution was stolen. The judge told the lawyers for both sides that the California case was trying to find out about the activity of Sri Urban in a co-counterbet Florida case.
“It was finally a big impure pace,” Judge Harvey E. Slester Said. “The password of the court … the business is handled by an external contractor. And someone represented Judge Tommy to the external contractor, saying,” I need a password change. ” And they changed the password.