Scattered Spider Hackers Plead Guilty on Day 1 of Trial
2026-06-28T19:23:26Z•80015f7dfeaf310991da5187e719ba77ee3d08feebefb366428acbb5004e22fa
ad_fraudalarum_technologiesaws_govcloud_leakcisacybercrime_attributiondata_leakddosdort_arrestexploit_codegithub_exposureinstagram_account_takeoveriot_botnetkimwolf_botnetlaw_enforcementmeta_ai_supportmicrosoft_patch_tuesdaynetherlands_server_seizurenetnutpopa_botnetransomwareresidential_proxiesscattered_spiderstark_industries_solutionsthe_gentlemenzero_day
What happened
A collection of KrebsOnSecurity reports (May–June 2026) covering a string of high-impact cyber incidents and law‑enforcement actions: two Scattered Spider members pleaded guilty after an August 2024 Transport for London attack; researchers tied the four‑year Popa Android TV‑box botnet to NetNut/Alarum Technologies (a publicly traded company); reporting on The Gentlemen ransomware outlines its rapid rise and possible administrator identity; Microsoft issued a record Patch Tuesday in June 2026 (nearly 200 fixes, ~36 rated critical, public exploit code for multiple flaws); attackers abused Meta’s
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 80015f7dfeaf310991da5187e719ba77ee3d08feebefb366428acbb5004e22fa
- Enrichment time
- 2026-06-28T19:23:26Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.