Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
Crime United States

Alleged 'Scattered Spider' Member Extradited to US (krebsonsecurity.com) 14

Investigative journalist and cybersecurity expert Brian Krebs reports: A 23-year-old Scottish man thought to be a member of the prolific Scattered Spider cybercrime group was extradited last week from Spain to the United States, where he is facing charges of wire fraud, conspiracy and identity theft. U.S. prosecutors allege Tyler Robert Buchanan and co-conspirators hacked into dozens of companies in the United States and abroad, and that he personally controlled more than $26 million stolen from victims. Scattered Spider is a loosely affiliated criminal hacking group whose members have broken into and stolen data from some of the world's largest technology companies. Buchanan was arrested in Spain last year on a warrant from the FBI, which wanted him in connection with a series of SMS-based phishing attacks in the summer of 2022 that led to intrusions at Twilio, LastPass, DoorDash, Mailchimp, and many other tech firms. The complain against Buchanan is available here (PDF).

Alleged 'Scattered Spider' Member Extradited to US

Comments Filter:
  • I feel bad for him because now people know he's affiliated with idiots that willingly chose the name "scattered spider" for their organization. The shame must be unbearable.

  • by Mirnotoriety ( 10462951 ) on Wednesday April 30, 2025 @10:02PM (#65343559)
    United States of America v. Tyler Robert Buchanan [krebsonsecurity.com]


    ‘Domain registration records from NameCheap for Phishing Domain 1 and Phishing Domain 2 showed that both domains were registered under the same NameCheap account (“Subject NameCheap Account”), which had the username bobsagetfaget and listed the account email address as lululongstaffihw98@gmail.com (“Subject Gmail Account”)’

    “The NameCheap records also showed that less than one month before the phishing attacks, on May 4, 2022, the Subject NameCheap Account was logged in from the IP address (“BUCHANAN IP Address”).”

    “Virgin Media records showed that the BUCHANAN IP Address was leased to BUCHANAN from January 26, 2022 to November 7, 2022.”

    “Two of the devices contained information relating to a proton email address that had been used by BUCHANAN to book a flight, based on information provided by British Airways; this flight reservation was associated with BUCHANAN’s true U.K. passport number, based on information provided by Police Scotland.”

    “The internet browser history from one of BUCHANAN’s devices showed that he accessed (i) a NameCheap registration and control panel page for Phishing Domain 2”
  • by Hecatonchires ( 231908 ) on Thursday May 01, 2025 @12:17AM (#65343743) Homepage

    They can get this man from another country, but they can't get back one who was sent away in error (despite having a court order in place that disallowed that)

  • I thought this administration was bent on deporting foreign criminals w/o due process, not importing them for due process.

    A 23-year-old Scottish man ...

    Oh, right... guessing he's not brown. /s

    (Although, a little bronzer could fix that.)

Kill Ugly Radio - Frank Zappa

Working...