Scattered Spider Hackers Plead Guilty on Day 1 of Trial
2026-06-30T07:23:28Z•e32e0f0ccd5dfc94f49a37e983ef30a03d212690e77fc2ffc752f24a0c8f374b
account-takeoverad-fraudalarum-technologiesaws-govcloudcisacongressional-inquirycritical-vulnerabilitiesdata-leakgithub-credential-leakinstagram-account-takeoverkimwolf-botnet','iot-botnet','dDoS','arrestsmeta-ai-support-botmicrosoft-patch-tuesdaynetherlands-seizurenetnutpopa-botnetpublic-exploitransomwareresidential-proxyrussian-influence-opsscattered-spidersocial-engineering-aistark-industries-solutionsthe-gentlementransport-for-london
What happened
This collection of KrebsOnSecurity items (May–Jun 2026) summarizes multiple high-impact cyber incidents: two Scattered Spider members pleaded guilty for the August 2024 Transport for London attack; researchers linked the Popa Android TV-box botnet to NetNut/Alarum Technologies (residential-proxy abuse used for ad fraud, account takeover and scraping); and the administrator of The Gentlemen ransomware gang is profiled as the group rapidly expanded via generous affiliate revenue-sharing. Microsoft’s June 2026 Patch Tuesday fixed a record ~200 vulnerabilities (nearly three dozen rated critical) —
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- e32e0f0ccd5dfc94f49a37e983ef30a03d212690e77fc2ffc752f24a0c8f374b
- Enrichment time
- 2026-06-30T07:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.