Scattered Spider Hackers Plead Guilty on Day 1 of Trial
2026-06-26T01:23:27Z•99c7def78ddb8e141a58320d5b46f6b7ae48efab863ef4dce0d4122ac749fb26
AI-abuseAWS GovCloudAlarumCISADDoSGitHubInstagramKimwolfMetaMicrosoftNetNutPatch TuesdayPopaScattered Spideraccount-takeoverarrestsbotnetcredential-leakdata-leaklaw-enforcementpublic-exploitransomwareresidential-proxysocial-engineeringzero-day
What happened
KrebsOnSecurity roundup (May–Jun 2026): multiple high-impact cyber incidents and developments — UK defendants linked to Scattered Spider pleaded guilty after an August 2024 Transport for London attack; researchers tied the Popa Android TV-box botnet to NetNut/Alarum Technologies (a publicly traded residential-proxy provider); The Gentlemen emerged as a top ransomware gang with aggressive affiliate economics; Microsoft shipped a record ~200 fixes in June Patch Tuesday (dozens rated critical and at least three with public exploit code); attackers tricked Meta’s AI support assistant to hijack IG/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 99c7def78ddb8e141a58320d5b46f6b7ae48efab863ef4dce0d4122ac749fb26
- Enrichment time
- 2026-06-26T01:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.