Fla. Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider
Summary: U.S. authorities arrested 19-year-old Noah Michael Urban of Palm Coast, Florida on Jan. 9, 2024, charged with wire fraud, aggravated identity theft, and conspiracy to use SIM-swapping to steal cryptocurrency; prosecutors say he stole at least $800,000 from at least five victims between August 2022 and March 2023. Sources told KrebsOnSecurity that Urban, who used the aliases "Sosa" and "King Bob," was a core member of the group behind the 2022 Twilio breach, which Group-IB linked to intrusions at more than 130 organizations including LastPass, DoorDash, Mailchimp, and Plex.
Why it matters: The same group pivoted from Twilio access to attack at least 163 of its customers, and its phishing pages forwarded stolen credentials and one-time codes through a Telegram bot in real time - defeating the MFA that many organizations still treat as sufficient against social engineering.
Read the original at Krebs on Security ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026