Scattered Spider Hackers Plead Guilty on Day 1 of Trial
2026-06-29T13:23:28Z•2d7f6d002c9a754e1d06f29b12c33e4bf8b35bf0ba8e8eb8c2065b32e19787ed
AWS GovCloud keysAlarum TechnologiesCISA data leakDDoSGitHub credential exposureInstagram account takeoverKimwolf botnetMeta AI support botMicrosoft Patch TuesdayNetNutNetherlands server seizuresPopa botnetRussia-linked infrastructureScattered SpiderThe Gentlemen ransomwareTransport for Londonaccount takeoveradvertising fraudcritical vulnerabilitieslawmakers inquirypatchingpublic exploitsransomwareresidential proxyvulnerability management
What happened
KrebsOnSecurity summaries from May–June 2026 highlight multiple high-impact cyber incidents: two Scattered Spider members pleaded guilty after an August 2024 attack that crippled Transport for London; researchers linked the Popa Android TV-box botnet to NetNut (Alarum Technologies), implicating a commercial residential-proxy provider in ad fraud and account takeover operations; and reporting probed the administrator identity of the rapidly growing ransomware group “The Gentlemen.” Additional coverage describes a record Microsoft Patch Tuesday (nearly 200 fixes, dozens critical, multiple bugs已/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 2d7f6d002c9a754e1d06f29b12c33e4bf8b35bf0ba8e8eb8c2065b32e19787ed
- Enrichment time
- 2026-06-29T13:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.