A 23 -year -old Scottish man considers a member of Vipul Scattered spider The Cybercrime Group was extradited from Spain to the United States last week, where they are facing allegations of wire fraud, conspiracy and identity theft. US prosecutors alleged Tyler Robert Buchanan And co-speculators hacked dozens of companies in the United States and abroad, and they personally controlled over $ 26 million stolen from the victims.
Scattered Spider is a relaxed criminal hacking group, whose members break and steal data from some of the world’s largest technology companies. Buchanan was arrested last year on a warrant from the FBI in Spain, who wanted him in relation to a series of SMS-based fishing attacks in the summer 2022, causing infiltration into Twilio, Lastpass, Dordash, Melchimp and many other technical firms.
Tyler Buchanan was being attended by the Spanish police at the airport in Palma de Mallorka in June 2024.
As previously reported by Krebsnasurity, Bachin (aka “Tylerb”) ran away from the United Kingdom in February 2023, a rival cybercrime gang hired thugs to attack his home, attacked his mother, and until he threatened to burn his cryptocurrency. Buchanan was arrested in June 2024 at the airport at Palma de Mallorca, while trying to fly to Italy. He had extradition to the United States First reported Last week by Bloomberg,
Have been members of the scattered spider Tied up Against 2023 ransomware attacks Staged And Caesar Casino in Las Vegas, but it is not clear whether Buchanan was implicated in that event. The complaint of the Department of Justice against Buchanan does not mention the 2023 ransomware attack.
Instead, Buchanan’s investigation appears at the center on SMS fishing operations from 2022, and on the sim-swaping attacks that were surrounded by individual cryptocurrency investors. In a SIM-swapping attack, the crooks transfer the target phone number to a device that they control and intersept the victim’s device any text message or phone calls-including the authentication and a one-time passcode for the password reset link sent via SMS.
In August 2022, Krebssnasurity reviewed the sliced data in a month’s long cybercrime campaign by scattered Spider, incorporating countless SMS-based fishing attacks against employees in major corporations. Safety firm Group Ib He was called by a different name – 0ktapusBecause the group usually spoils the identity provider Okata Employees in targeted firms in their fishing messages.
A scattered spider/0 ktapus SMS phishing greed sent to Twilio employees in 2022.
The complaint against Buchanan (PDF) stated that the FBI tied them to 2022 SMS fishing attacks, which was used to register several OktA-themed fishing domains seen in the campaign after the discovery of the same user name and email address. Domain registrar Namichap It was found that less than a month before Fishing Spree, the account registering those domains had logged into an internet address among the UK FBI investigators, the Scottish police told them that they were placed on the address from 26 January 2022 to 7 November, 2022.
Authorities confiscated at least 20 digital devices, when they raided Buchanan’s residence, and on one of those devices they found user names and passwords for the employees of three separate companies targeted in the fishing campaign.
The FBI complaint stated, “Aaj Tak FBI investigation has gathered evidence that Buchanan and his co-speculators targeted at least 45 companies in the United States and abroad, including Canada, India and the United Kingdom.” “One of the Buchanan equipment had a screenshot of telegram messages among an account used by Buchanan and other unknown co-scientists, which discusses dividing the income of SIM swapping.”
US prosecutors allege that records from discord showed that the UK Internet address was used to operate a discord account, which specifies a cryptocurrency wallet when another user is asked to send funds. The complaint stated that publicly available transactions for that payment address show that around 391 bitcoins were transferred to and out in this address between October 2022.
February 2023; 391 bitcoins currently exceed $ 26 million.
In November 2024, federal prosecutors at Los Angeles ignored criminal allegations against Buchanan and including four other alleged scattered spider members, Ahmed albdavi23, College Station, Texas; Joel Evans25, of Jacksonville, Northern Carolina; Evans Osbo20, Dallas; And Noah Urban20, Palm Coast, Florida. Krebsnasurity reported last year that a 17-year-old Spider member of the United Kingdom was arrested as part of a joint investigation with FBI in MGM Hack.
The lawyer appointed by the court of Shri Buchanan did not respond to the request of the comment. The accused faced allegations of wire fraud conspiracy, conspiracy to obtain information by computers for personal financial benefits, and enhanced identity theft. The punishment for subsequent charges is a minimum punishment for a two -year jail.
The US district court documents for the central district of California indicate that Buchanan is being held without a trident trial. The preliminary hearing in the case is slaughtered for 6 May.
