Alleged ‘Scattered Spider’ Member Extradited to U.S.
Summary: A 23-year-old Scottish man, Tyler Robert Buchanan, was extradited from Spain to the United States last week to face charges of wire fraud conspiracy, conspiracy to obtain information by computer for private financial gain, and aggravated identity theft. The FBI complaint alleges Buchanan and co-conspirators targeted at least 45 companies in the U.S. and abroad, and that he personally controlled more than $26 million in stolen funds tied to 2022 SMS phishing attacks against Twilio, LastPass, DoorDash, and Mailchimp.
Bottom line: The FBI tied Buchanan to the 2022 campaign through a username and email address used to register Okta-themed phishing domains, and one of at least 20 seized devices held credentials for employees of three targeted companies. Prosecutors say 391 bitcoin moved through a payment address linked to him between October 2022 and February 2023, and he is being held without bail pending a May 6 preliminary hearing.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026