Scattered Spider Hackers Plead Guilty on Day 1 of Trial
2026-06-26T19:23:27Z•bc10686914a920b504543256214b49758e96fc69e795daf4a8852013719240c5
AWS GovCloudAlarum TechnologiesCISA data leakDDoSGitHub credential exposureInstagram account takeoverKimwolf botnetMeta AI support botMicrosoft Patch TuesdayNetNutNetherlands server seizuresPopa botnetScattered SpiderTfLThe Gentlemen ransomwareTransport for Londonexploit codehigh-severity vulnerabilitiesinfluence operationsransomwareresidential proxy abuse
What happened
A batch of high‑impact cyber stories: two Scattered Spider members pleaded guilty for the August 2024 Transport for London (TfL) attack; researchers tie the large Android TV box botnet “Popa” to NetNut/Alarum Technologies (residential proxy abuse for ad fraud, scraping and takeovers); reporting profiles the administrator of The Gentlemen ransomware gang; Microsoft issued a record June 2026 Patch Tuesday fixing ~200 bugs (dozens critical and at least three with public exploit code); attackers abused Meta’s AI support bot to hijack Instagram accounts; a CISA contractor exposed AWS GovCloud keys/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- bc10686914a920b504543256214b49758e96fc69e795daf4a8852013719240c5
- Enrichment time
- 2026-06-26T19:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.