Cyber Risks · Krebs on Security

Canadian Man Pleads Guilty in Snowflake Extortions

Summary: Connor Riley Moucka, a 26-year-old from Kitchener, Ontario, pleaded guilty to computer fraud and conspiracy for using stolen credentials to breach more than 165 Snowflake customers between February and October 2024, targeting accounts without multi-factor authentication. He also admitted to stealing call and text history records of more than 100 million AT&T customers, and the Justice Department says the conspirators made over $2.5 million in ransom payments while threatening to publish stolen data.

What's compelling: The entry point was stolen credentials on accounts that had not enforced multi-factor authentication, and the conspirators turned that into more than $2.5 million in ransoms and records on over 100 million AT&T customers. Moucka also threatened and harassed the government officials and security researchers tracking him, and re-extorted at least one victim using stolen data belonging to a government officer and that officer's family.

Read the original at Krebs on Security ↗

Topics
Threat Actors & Nation-State
Related