Federal prosecutors have charged five individuals tied to the hacking group “Scattered Spider,” accused of stealing at least $11 million in crypto and sensitive data between late 2021 and mid-2023. The group used phishing and SIM swapping tactics to access private accounts and company networks, targeting several victims, including telecommunications firms and a cryptocurrency exchange. The charges come after a lengthy investigation into the group’s activities and the scale of their operations.
Cybercrime Crypto Tactics: Phishing and SIM Swapping
The group employed phishing to trick victims into revealing login credentials and SIM swapping to bypass security by taking control of victims’ phone numbers. This allowed them to access cryptocurrency wallets and sensitive data from businesses. These methods, which exploit weaknesses in personal and company security systems, have been increasingly used by cybercriminals to gain unauthorized access to valuable digital assets.
Domestic and International Members
The defendants include Noah Urban (20) of Florida, Joel Evans (25) of North Carolina, Ahmed Elbadawy (23) and Evans Osiebo (20) of Texas, and Tyler Buchanan (22) from Scotland. Unlike many cybercrime groups linked to foreign countries, Scattered Spider’s members were based in both the U.S. and U.K. This highlights the growing concern of domestic involvement in high-profile international cybercrime rings, making it harder for law enforcement to track and apprehend those responsible.
Recovery and Ongoing Investigation
Authorities have recovered approximately $4 million in cryptocurrency, though the full financial and data losses are still under investigation. Buchanan, who remains outside the U.S., was identified through domain registrations for fake websites used in the scheme. Investigators are working to trace the remaining stolen funds, and more arrests are expected as the case progresses.
The case emphasizes the growing threat of small, decentralized hacking groups capable of inflicting significant financial harm. As the world becomes increasingly digitized, these sophisticated methods of cybercrime underscore the need for stronger security measures for individuals and businesses alike.
