US Charges Five Alleged Scattered Spider Members

Five alleged members of the Scattered Spider cybercrime group were charged for phishing and stealing millions in cryptocurrency.

The US Department of Justice on Wednesday announced charges against five individuals for their alleged roles in phishing attacks resulting in credential, data, and cryptocurrency theft.

According to the indictment, from at least September 2021 to April 2023, the suspects sent phishing text messages to employees at numerous companies, posing as the employing organization or one of its suppliers.

Often purporting that the employees’ accounts were about to be deactivated, the fraudulent messages directed the victims to phishing websites designed to mimic those of the legitimate companies, luring the victims into entering their usernames and passwords, which were sent to the attackers.

The defendants then used the stolen credentials to access the victims’ accounts and the systems of the targeted companies, stealing confidential data and personal information, including names, phone numbers, email ...