

Alleged 'Scattered Spider' Member Extradited to US (krebsonsecurity.com) 14
Investigative journalist and cybersecurity expert Brian Krebs reports: A 23-year-old Scottish man thought to be a member of the prolific Scattered Spider cybercrime group was extradited last week from Spain to the United States, where he is facing charges of wire fraud, conspiracy and identity theft. U.S. prosecutors allege Tyler Robert Buchanan and co-conspirators hacked into dozens of companies in the United States and abroad, and that he personally controlled more than $26 million stolen from victims. Scattered Spider is a loosely affiliated criminal hacking group whose members have broken into and stolen data from some of the world's largest technology companies. Buchanan was arrested in Spain last year on a warrant from the FBI, which wanted him in connection with a series of SMS-based phishing attacks in the summer of 2022 that led to intrusions at Twilio, LastPass, DoorDash, Mailchimp, and many other tech firms. The complain against Buchanan is available here (PDF).
Re: (Score:2)
Since Scotland is not a European member country, he was never going to be safe from extradition when in Spain. So perhaps you should view this as a cautionary tale about travelling to certain areas of which you don't know the laws?
Re: Should I bet outraged? (Score:3, Insightful)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
But the Scattered Spider gang member wouldn't escape jail even if he had chose to reside in a country not extraditing UK nationals. He would have been prosecuted by the national authorities (aut dedere aut judicare https://en.wikipedia.org/wiki/... [wikipedia.org] ), currently in the UN Convention against Transnational Organized Crime, article 16 https://www.unodc.org/e4j/en/o... [unodc.org] :
A State Party in whose territory an alleged offender is found, if it does not extradite such person in respect of an offence to which this article applies solely on the ground that he or she is one of its nationals, shall, at the request of the State Party seeking extradition, be obliged to submit the case without undue delay to its competent authorities for the purpose of prosecution.
(Roman Polanski wasn't judged in either of France, Poland, or Switzerland due to statute of limitations, possibly as well the absence of age of
How terrible! (Score:2)
I feel bad for him because now people know he's affiliated with idiots that willingly chose the name "scattered spider" for their organization. The shame must be unbearable.
Current hackers be dumb /s (Score:5, Informative)
‘Domain registration records from NameCheap for Phishing Domain 1 and Phishing Domain 2 showed that both domains were registered under the same NameCheap account (“Subject NameCheap Account”), which had the username bobsagetfaget and listed the account email address as lululongstaffihw98@gmail.com (“Subject Gmail Account”)’
“The NameCheap records also showed that less than one month before the phishing attacks, on May 4, 2022, the Subject NameCheap Account was logged in from the IP address (“BUCHANAN IP Address”).”
“Virgin Media records showed that the BUCHANAN IP Address was leased to BUCHANAN from January 26, 2022 to November 7, 2022.”
“Two of the devices contained information relating to a proton email address that had been used by BUCHANAN to book a flight, based on information provided by British Airways; this flight reservation was associated with BUCHANAN’s true U.K. passport number, based on information provided by Police Scotland.”
“The internet browser history from one of BUCHANAN’s devices showed that he accessed (i) a NameCheap registration and control panel page for Phishing Domain 2”
So they can act outside their borders? (Score:4, Insightful)
They can get this man from another country, but they can't get back one who was sent away in error (despite having a court order in place that disallowed that)
Re: (Score:3)
They can get this man from another country, but they can't get back one who was sent away in error (despite having a court order in place that disallowed that)
You're confusing "can't" with "won't".
Re: So they can act outside their borders? (Score:2)
Wait ... (Score:2)
I thought this administration was bent on deporting foreign criminals w/o due process, not importing them for due process.
A 23-year-old Scottish man ...
Oh, right... guessing he's not brown. /s
(Although, a little bronzer could fix that.)