‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty – Krebs on Security

Key Highlights:

Here’s a concise HTML-formatted summary of the article in 3-5 bullet points:

• Guilty Plea: Tyler Robert Buchanan, a 24-year-old British national and senior member of “Scattered Spider,” admitted to wire fraud conspiracy and aggravated identity theft for his role in SMS phishing attacks that stole tens of millions in cryptocurrency.
• Cybercrime Tactics: The group used social engineering, SIM-swapping, and phishing to breach companies like Twilio and LastPass, siphoning funds from victims. Buchanan personally stole at least $8 million.
• Arrest & Extradition: Buchanan fled the UK after a rival gang attacked his home but was arrested in Spain in 2024 and extradited to the U.S., where he faces up to 22 years in prison.
• Group Activity: Scattered Spider is part of “The Com,” a cybercriminal network boasting about thefts on Telegram. Another member, Noah Urban, was sentenced to 10 years, while others face pending charges.
• Upcoming Trials: Two alleged members in the UK (Owen Flowers and Thalha Jubair) will stand trial for hacking UK retailers and U.S. healthcare providers, pleading not guilty.

---

Here’s a rewritten version of the article with improved clarity, structure, and readability while maintaining the original meaning:

---

British Cybercriminal Pleads Guilty to Multi-Million Dollar Scams

A 24-year-old British national and senior member of the cybercrime group Scattered Spider has admitted to wire fraud conspiracy and aggravated identity theft. Tyler Robert Buchanan, known online as “Tylerb,” played a key role in a 2022 phishing campaign that targeted major tech firms, leading to the theft of tens of millions in cryptocurrency.

Buchanan, once ranked among the top cybercriminals in underground hacking circles, now faces up to 20 years in prison. Currently in U.S. custody, he awaits sentencing after pleading guilty. Photos published by the Daily Mail show Buchanan as a child and later as an adult detained by Spanish authorities.

The Scheme
Scattered Spider is notorious for using social engineering—often impersonating employees—to trick companies into granting access. Buchanan admitted to collaborating with other members to launch thousands of SMS phishing attacks, compromising firms like Twilio, LastPass, DoorDash, and Mailchimp. The stolen data was then used in SIM-swapping attacks, where hackers hijack phone numbers to intercept authentication codes and drain victims’ crypto accounts.

The U.S. Department of Justice estimates Buchanan stole at least $8 million from individual investors. Investigators linked him to the crimes after tracing phishing domains to an account registered under his details.

Arrest and Extradition
Buchanan fled the U.K. in early 2023 after a rival gang violently threatened him. Later that year, authorities found evidence tying him to the scams at his Scotland residence. He was arrested in Spain in June 2024 while attempting to board a flight to Italy and was extradited to the U.S.

Broader Crackdown
Buchanan is the second Scattered Spider member to plead guilty. Noah Michael Urban, another associate, was sentenced to 10 years in prison in 2024. Three others—Ahmed Elbadawy, Evans Osiebo, and Joel Evans—still face charges. Meanwhile, two additional suspects, Owen Flowers and Thalha Jubair, are set to stand trial in the U.K. for hacking-related offenses.

The Cybercrime Underground
Scattered Spider operates within a larger network of hackers known as The Com, where members brag about high-profile thefts on platforms like Telegram and Discord. Buchanan’s alias, “Tylerb,” once appeared on a leaderboard ranking top SIM-swappers—a grim testament to his notoriety.

Sentencing Ahead
Buchanan’s sentencing is scheduled for August 2026. While he could face up to 22 years, the final penalty may be influenced by factors such as his cooperation with authorities and time already served.

---

This version improves flow, eliminates redundancy, and presents the information in a more engaging, journalistic style. Let me know if you’d like any further refinements!