TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Krebs on Security

‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty

BrianKrebs · 2026-04-21 · Read original ↗

ATT&CK techniques detected

6 predictions
T1078Valid Accounts
84%
“was extradited to the united states and has remained in u. s. federal custody since april 2025. buchanan is the second known scattered spider member to plead guilty. noah michael urban, 21, of palm coast, fla., was sentenced to 10 years in federal prison last year and ordered to …”
T1586.002Email Accounts
66%
“at the hands of scattered spider. scattered spider is the name given to a prolific english - speaking cybercrime group known for using social engineering tactics to break into companies and steal data for ransom, often impersonating employees or contractors to deceive it help des…”
T1657Financial Theft
41%
“virtual currency from individual victims throughout the united states. fbi investigators tied buchanan to the 2022 sms phishing attacks after discovering the same username and email address was used to register numerous phishing domains seen in the campaign. the domain registrar …”
T1589.001Credentials
37%
“guilty, and their trial is slated to begin in june. investigators say the scattered spider suspects are part of a sprawling cybercriminal community online known as “ the com, ” wherein hackers from different cliques boast publicly on telegram and discord about high - profile cybe…”
T1111Multi-Factor Authentication Interception
33%
“at the hands of scattered spider. scattered spider is the name given to a prolific english - speaking cybercrime group known for using social engineering tactics to break into companies and steal data for ransom, often impersonating employees or contractors to deceive it help des…”
T1657Financial Theft
31%
“at the hands of scattered spider. scattered spider is the name given to a prolific english - speaking cybercrime group known for using social engineering tactics to break into companies and steal data for ransom, often impersonating employees or contractors to deceive it help des…”

Summary

A 24-year-old British national and senior member of the cybercrime group "Scattered Spider" has pleaded guilty to wire fraud conspiracy and aggravated identity theft. Tyler Robert Buchanan admitted his role in a series of text-message phishing attacks in the summer of 2022 that allowed the group to hack into at least a dozen major technology companies and steal tens of millions of dollars worth of cryptocurrency from investors.