A British man believed to lead the Scattered Spider collective pleaded guilty in the U.S. to wire fraud and aggravated identity theft for a campaign that stole at least $8 million in cryptocurrency. Prosecutors say the group used SMS phishing, SIM swaps, and MFA-bypassing tactics to compromise corporate accounts across multiple industries; the leader faces sentencing in August 2026. #ScatteredSpider #TylerBuchanan
Keypoints
- Tyler Robert Buchanan, alleged leader of Scattered Spider, pleaded guilty to wire fraud and aggravated identity theft.
- The group is accused of stealing at least $8 million in cryptocurrency via SMS phishing campaigns from September 2021 to April 2023.
- Attackers used phishing websites to harvest PII and credentials, then executed SIM swaps and other tactics to seize email accounts, phone numbers, and wallets.
- Scattered Spider (also known as 0ktapus/UNC3944) operates via Telegram and Discord, uses MFA bombing and social engineering, and has been linked to breaches at MGM, Caesars, Riot Games, and others.
- Buchanan was arrested in Spain, is in U.S. custody, faces up to 22 years at sentencing, and several co-conspirators have also been charged or sentenced.