U.S. federal charges detail that Scattered Spider, a cybercrime group, primarily gains initial access via credential phishing and repeated login attempts to employee accounts. After compromising credentials, the group executes extortion schemes, threatening companies to pay ransoms for millions of dollars. The article reports the recent charges against a suspected teen member but does not describe a specific software vulnerability, so CVSS scores, affected versions, patches, and technical workarounds are not applicable.
Threat Intelligence Federal charges filed against teen hacker allegedly part of Scattered Spider April 30, 2026 Share By SC Staff (Adobe Stock Images) BleepingComputer reports that teen hacker "Bouquet," who is suspected to be part of the Scattered Spider hacking collective, has been charged by the U.S. with several crimes linked to large-scale extortion schemes targeting companies worldwide. Bouquet, who was detained by Finnish law enforcement earlier this month, now faces allegations including wire fraud, conspiracy, and computer intrusion. One complaint mentions the hacker took part in multiple cyberattacks to extort millions of dollars from various organizations. The scheme involved gaining access to accounts using compromised credentials. After gaining access, the group threatened companies to pay a ransom. Scattered Spider is a cybercrime group of young hackers from the U.S. and the UK who target companies for financial gain. According to the Federal Bureau of Investigation, the group tricks employees using phishing messages and repeated login requests. Recently, suspected leader Tyler Robert Buchanan admitted to fraud-related charges in federal court proceedings . SC Staff Related Ransomware KryBit retaliates against 0APT with extensive data leak SC Staff April 30, 2026 Newly identified ransomware-as-a-service operation KryBit has compromised fellow nascent RaaS gang 0APT and exposed its full operational information, including access logs, system files, and PHP source code, in retaliation for the latter's initial leak of some of its data earlier this month, reports Infosecurity Magazine. Phishing Report sheds light on Chinese phishing campaigns against journalists, activists SC Staff April 30, 2026 Report sheds light on Chinese phishing campaigns against journalists, activists Chinese state-backed freelance hackers have launched a pair of phishing campaigns aimed at journalists and opposition activists in Taiwan, Hong Kong, Tibet, and China's Uyghur region in a span of nine months, according to The Record, a news site by cybersecurity firm Recorded Future. Malware Novel Minecraft-targeting stealer tapped by reemergent LofyGang SC Staff April 30, 2026 Brazilian threat group LofyGang has resurfaced to compromise Minecraft players with the novel LofyStealer malware, also known as GrabBot, more than three years after its last attack campaign, The Hacker News reports. Related Events Cybercast Better Threat Intelligence Between Public and Private Sectors On-Demand Event Virtual Conference Nationwide Cybersecurity Summit 2025: Safeguarding America’s Digital Future On-Demand Event Virtual Conference Securing the Future of Finance: Strategies to Counter Modern Cyber Threats On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms DNS Spoofing Deauthentication Attack Defacement Denial of Service Dictionary Attack Disruption Distributed Scans Dumpster Diving Password Cracking Reconnaissance You can skip this ad in 5 seconds