Feds Charge Five Men in ‘Scattered Spider’ Roundup
Summary: Federal prosecutors in Los Angeles unsealed charges against five men aged 20 to 25 alleged to be members of Scattered Spider, also called Oktapus, a group blamed for dozens of intrusions at U.S. technology companies between 2021 and 2023 including LastPass, MailChimp, Okta, T-Mobile and Twilio. The group ran SMS phishing that mimicked employer Okta login pages, kept phishing sites online for only one or two hours, and used a hidden Telegram bot to forward stolen credentials and one-time codes in real time.
What you should know: Prosecutors say the group used access to Twilio to attack at least 163 of its customers and mainly sought to steal cryptocurrency, with one defendant, Tyler Buchanan, alleged to have held Bitcoins worth $27 million from SIM-swapping. The scheme turned on one-time passcodes and Okta logins, so the same SMS-delivered codes many organizations still rely on were the entry point.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026