TLDR
A senior member of the Scattered Spider cybercrime group has pleaded guilty to orchestrating SMS phishing attacks that led to SIM swapping thefts, stealing at least $8 million in cryptocurrency from U.S. victims. Tyler Robert Buchanan, 24,...
How it works
A senior member of the Scattered Spider cybercrime group has pleaded guilty to orchestrating SMS phishing attacks that led to SIM swapping thefts, stealing at least $8 million in cryptocurrency from U.S. victims. Tyler Robert Buchanan, 24,...
Red flags
- : Unexpected SMS requesting verification codes, password resets, or urgent account action Texts impersonating tech companies, banks, or cryptocurrency exchanges with suspicious links Requests for one time passcodes or authentication tokens via text message
What to do
- 1Use authenticator apps (Google Authenticator, Authy) instead of SMS based 2FA — SMS codes can be intercepted via SIM swapping
- 2Enable SIM swap protection with your carrier — require a PIN or in person verification for number transfers
- 3Never share authentication codes — legitimate services will never ask you to read back a code or enter it on a website linked from a text The group targeted ind
Source
krebs
Source reviewed by Mythos Forensic Team
https://krebsonsecurity.com/2026/04/scattered-spider-member-tylerb-pleads-guilty/FAQ
Is Scattered Spider Member Tylerb Pleads Guilty: SIM Swapping and SMS Phishing Scam Hits Consumers a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
: Unexpected SMS requesting verification codes, password resets, or urgent account action Texts impersonating tech companies, banks, or cryptocurrency exchanges with suspicious links Requests for one time passcodes or authentication tokens via text message
What should I do first?
Use authenticator apps (Google Authenticator, Authy) instead of SMS based 2FA — SMS codes can be intercepted via SIM swapping; Enable SIM swap protection with your carrier — require a PIN or in person verification for number transfers; Never share authentication codes — legitimate services will never ask you to read back a code or enter it on a website linked from a text The group targeted ind
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.