Scattered Spider Hackers Plead Guilty on Day 1 of Trial
2026-06-25T07:23:28Z•98fed284e3903a28e0b216a35982ef1ed6a6402bc61827e92f9538d3d8779dd7
AI social engineeringAWS GovCloudAlarum TechnologiesCISADDoSGitHub leakInstagram compromiseKimwolfMetaMicrosoft Patch TuesdayNetNutNetherlandsPopaScattered SpiderTransport for Londonbotnetcybercrimedata leakexploitlaw-enforcementransomwareserver seizuresvulnerabilitieszero-day
What happened
The collection highlights a string of high-impact cyber incidents and law‑enforcement actions in mid‑2026: two members of Scattered Spider pleaded guilty over an August 2024 attack that crippled Transport for London; researchers tied the large Android Popa botnet to publicly traded NetNut/Alarum Technologies; and clues surfaced identifying the operator of The Gentlemen ransomware. Major operational incidents include arrests in the Netherlands and seizure of 800 servers used to support Russian cyber operations, the arrest of an alleged Kimwolf botnet operator, and revelations that a CISA vendor
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 98fed284e3903a28e0b216a35982ef1ed6a6402bc61827e92f9538d3d8779dd7
- Enrichment time
- 2026-06-25T07:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.