Cyber Risks · Krebs on Security

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested

Summary: A 22-year-old from Dundee, Scotland named Tyler Buchanan, known online as "Tyler" and "tylerb," was arrested in Palma de Mallorca, Spain this week on an FBI warrant as he tried to board a flight to Italy; he is alleged to be the ringleader of Scattered Spider, a group suspected of hacking Twilio, LastPass, DoorDash, Mailchimp and nearly 130 other organizations over two years. Spanish police said he at one point controlled Bitcoins worth $27 million, and the group's 2022 SMS phishing campaign mimicked employer Okta login pages and used a hidden Telegram bot to forward stolen credentials and one-time codes in real time.

What you should know: Scattered Spider's entry point was not a zero-day but an employee typing a password and one-time code into a lookalike Okta page, and access to Twilio alone was then used against at least 163 of its customers.

Read the original at Krebs on Security ↗

Topics
Cybercrime & Law Enforcement
Related