Scattered Spider Hackers Plead Guilty on Day 1 of Trial
2026-06-27T13:23:28Z•117557a7bf6e9345fcc746b459990872c952c21a1fcb2c45635ce048713e873d
AI support botAWS GovCloudAlarum TechnologiesCISACISA breachGitHub leakInstagram account takeoverJune 2026MetaMicrosoft Patch TuesdayNASDAQ:ALARNetNutNetherlandsPopa botnetScattered SpiderThe GentlemenTransport for Londonbotnetcredential leakinfrastructure abuse','Russia','Stark Industries Solutions','lawpublic exploitransomwareresidential proxyserver seizurezero-day
What happened
This collection of KrebsOnSecurity items details multiple high-impact cyber incidents from May–June 2026: two Scattered Spider members pled guilty for an August 2024 attack that disrupted Transport for London; researchers linked the large Popa Android TV-box botnet to NetNut (Alarum Technologies, NASDAQ: ALAR); analysis surfaced likely real-world ties for the administrator of the ransomware group “The Gentlemen”; Microsoft’s June 2026 Patch Tuesday fixed ~200 flaws (dozens critical) with public exploit code available for several bugs; attackers abused Meta’s AI support assistant to reset and h
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 117557a7bf6e9345fcc746b459990872c952c21a1fcb2c45635ce048713e873d
- Enrichment time
- 2026-06-27T13:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.