November 20, 2024 at 08:37PM
The US Department of Justice has indicted five individuals linked to the cyber gang Scattered Spider, accused of stealing millions in cryptocurrency through SMS phishing and social engineering. The group also targeted MGM Resorts and Caesars Entertainment. Arrests were made in the US and Spain, with serious charges facing the suspects.
### Meeting Notes Takeaways
**1. Indictment Overview:**
– Five individuals indicted by the US Department of Justice for stealing millions in cryptocurrency.
– Suspects are allegedly part of the cyber-gang Scattered Spider.
**2. Criminal Activities:**
– The group is suspected of orchestrating ransomware attacks on MGM Resorts and Caesars Entertainment.
– They compromised identity services vendor Okta and affected many of its customers.
– Techniques used include SMS phishing and social engineering.
**3. Named Suspects:**
– Ahmed Hossam Eldin Elbadawy (“AD”), 23, College Station, Texas.
– Noah Michael Urban (“Sosa” and “Elijah”), 20, Palm Coast, Florida.
– Evans Onyeaka Osiebo, 20, Dallas, Texas.
– Joel Martin Evans (“joeleoli”), 25, Jacksonville, North Carolina.
– Tyler Robert Buchanan, 22, United Kingdom.
**4. Arrests:**
– Noah Urban was arrested in January on fraud charges.
– Joel Martin Evans was arrested in North Carolina on a recent Tuesday.
– Tyler Buchanan was apprehended in Spain in June and is suspected to be the gang leader.
**5. Evidence Found:**
– Discovery of a phishing kit on Buchanan’s device designed to capture information via Telegram.
– Buchanan’s browsing history indicated involvement in the gang’s phishing strategies.
**6. Modus Operandi:**
– Multi-year cryptocurrency theft campaign primarily using SMS phishing to deceive victims into providing login credentials.
– Use of stolen credentials to access corporate systems, leading to further phishing opportunities and direct theft from cryptocurrency wallets.
**7. Additional Law Enforcement Actions:**
– The FBI also shut down the online marketplace PopeyeTools, associated with illegal activities.
– Charges unsealed against three administrators of PopeyeTools, which had generated approximately $1.7 million in revenue from selling sensitive data.
**8. Legal Charges:**
– Each of the five suspects charged with conspiracy to commit wire fraud, conspiracy, and aggravated identity theft (up to 20 years each).
– Buchanan faces an additional wire fraud charge that could result in another 20 years.
**9. Impact of Cyber Crime:**
– Highlighted the increasing sophistication of phishing scams and their potential to cause significant financial loss.
– Importance of vigilance regarding suspicious emails or texts to protect personal information and finances.
**10. Statements from Officials:**
– FBI agents emphasize the importance of their work in combating cybercrime and protecting the public.