‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty
2026-04-25T07:23:30Z•7f5462edff53dbd258bb27ceb751fd1b730c2a128bf76aef378fbf9757d5f7e6
aggravated identity theftaisurucanisterwormcloud service wormdaniil shkuchinfarsi locale targetinggandcrabiot botnetiranjackskidkimwolfmicrosoft office tokensmossad (botnet)revilrouter vulnerabilitiesrussia-linked actorsscattered spidersmishingsms phishingtoken thefttylerbunited states law enforcementunknwiperwire fraud
What happened
KrebsOnSecurity coverage (Mar–Apr 2026) of multiple high-impact cyber events: a senior Scattered Spider member ('Tylerb') pleaded guilty to SMS/phishing-enabled intrusions and crypto theft; Russian-linked actors harvested Microsoft Office authentication tokens by exploiting flaws in older routers across >18,000 networks; German authorities identified 'UNKN' (Daniil Shchukin) as the operator behind GandCrab/REvil; a CanisterWorm wiper targeted systems using Iran time/Farsi settings and spread via poorly secured cloud services; U.S./Canadian/German law enforcement disrupted four large IoT botnet
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 7f5462edff53dbd258bb27ceb751fd1b730c2a128bf76aef378fbf9757d5f7e6
- Enrichment time
- 2026-04-25T07:23:30Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.