Scattered Spider Hackers Plead Guilty on Day 1 of Trial
2026-06-24T07:23:28Z•d987bb18552a7038e31c611243f7335f9e4ee63ddfad561aef0199b3fb14c0c6
AI-abuseDDoSGovCloudIsraelNetherlandsRussiaUnited Kingdomaccount-takeoveradvertising-fraudarrestsbotnetcloud-credentialscredential-leakdata-leakhosting-abuseinfrastructurelaw-enforcementnation-state-infrastructurepatchingproxy-abuseransomwareresidential-proxysocial-engineeringvulnerability-disclosurezero-day
What happened
Multiple high-impact cyber incidents and investigations reported across June 2026: two Scattered Spider members pleaded guilty for an August 2024 Transport for London outage; researchers linked the Android-based Popa botnet to NetNut/Alarum Technologies, implicating a residential-proxy provider in mass fraud and account-takeover activity; The Gentlemen ransomware gang continues rapid growth and high affiliate payouts; Microsoft released a record ~200 fixes (dozens critical) with public exploit code for several flaws; attackers abused Meta’s AI support assistant to hijack Instagram accounts via
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- d987bb18552a7038e31c611243f7335f9e4ee63ddfad561aef0199b3fb14c0c6
- Enrichment time
- 2026-06-24T07:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.