Scattered Spider Cybercrime Members Face Prison Time

Scattered Spider Cybercrime Members Face Prison Time

November 21, 2024 at 01:56PM

The Department of Justice has charged five members of the hacking group “Scattered Spider” with various crimes related to cyberattacks on companies like MGM Resorts and Caesar’s Palace. Allegations include phishing and stealing sensitive data, cryptocurrencies, and identity information. They face significant prison sentences if convicted.

### Meeting Takeaways:

1. **Criminal Charges Unsealed**: The Department of Justice (DoJ) has charged five individuals associated with the hacking group “Scattered Spider.”

2. **Group Background**: “Scattered Spider” is known for recruiting young individuals and executing high-profile cyberattacks, notably against MGM Resorts and Caesar’s Palace last year.

3. **Method of Operation**:
– The defendants used phishing messages to target employees across the U.S.
– They harvested login credentials to access company systems and steal sensitive data, including intellectual property and personal identifying information (PII).
– They gained unauthorized access to cryptocurrency accounts, resulting in the theft of millions of dollars in virtual currency.

4. **Defendant Profiles**:
– Four defendants are American, aged 20 to 25, with Joel Martin Evans (aka “joeleoli”) being the eldest.
– The fifth defendant, Tyler Robert Buchanan (22), is based in the United Kingdom.

5. **Charges**: The U.S. defendants are charged with:
– One count of conspiracy to commit wire fraud.
– One count of conspiracy.
– One count of aggravated identity theft.
– Buchanan faces additional charges including wire fraud.

6. **Potential Sentences**:
– Each defendant could face a maximum of 20 years for conspiracy to commit wire fraud.
– Up to 5 years for conspiracy, and 2 years for aggravated identity theft.
– Buchanan may face an additional 20 years for his wire fraud charge.

7. **Industry Impact Statement**: Charles Carmakal, CTO of Mandiant Consulting at Google Cloud, emphasized the extensive financial and operational damage caused by these individuals and aims for their prosecution to deter similar actors.

Full Article