Tyler Robert Buchanan, 24, pleaded guilty to wire fraud conspiracy and aggravated identity theft. Buchanan held senior status within Scattered Spider, a cybercrime group responsible for breaching at least a dozen major technology companies in summer 2022. The group deployed SMS phishing attacks to gain initial access. Buchanan's admitted role enabled Scattered Spider to steal tens of millions of dollars in cryptocurrency from investors. The guilty plea represents the first major prosecution outcome against a Scattered Spider operator, marking law enforcement progress against a threat group known for targeting tech sector employees through social engineering. Defenders should note Scattered Spider's primary attack vector remains text-message phishing targeting individuals with privileged access to corporate networks and cryptocurrency holdings. Organizations handling digital assets face elevated risk from this group's demonstrated capability to convert network access into direct financial theft.
