‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty

2026-04-22T13:23:31Z417f36d143452f082265727930e30ba953da44a26cca27a456e4529f7e4cc337
adobe-readeraisurubluehammercanisterwormcredential-theftddosgoogle-chromeiot-botnetiranjackskidkimwolfmicrosoftmicrosoft-office-tokensmossadnation-statepatch-tuesdayrouter-exploitrussiasharepoint-zero-daysupply-chain-security?removedtoken-harvestvulnerability-managementwindows-defenderwiperzero-day

What happened

Collection of KrebsOnSecurity posts (Mar–Apr 2026) highlighting multiple high-impact threats and mitigations: Microsoft’s April Patch Tuesday (167 fixes) including a SharePoint zero-day and a publicly disclosed Windows Defender flaw dubbed “BlueHammer,” plus Chrome and Adobe emergency fixes; a widespread Russian campaign that exploited older router flaws to harvest Microsoft Office authentication tokens from more than 18,000 networks; disruption of four massive IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) tying to record DDoS attacks against millions of devices; multiple wiper campaigns (‘‘

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
krebs_on_security
Record identifier
417f36d143452f082265727930e30ba953da44a26cca27a456e4529f7e4cc337
Enrichment time
2026-04-22T13:23:31Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · ‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty · Baitaphish