- Messages
- 4,003
- Likes
- 1,873
- Points
- 2,130
Former US Army soldier Cameron John Wagenius, known by the nicknames kiberphant0m and cyb3rph4nt0m, was sentenced to seventy months in prison for cyberattacks and extortion. He and his accomplices reportedly attacked at least ten technology and telecommunications companies between April 2023 and December 2024, and did so while still in the military.
Investigators name Wagenius's accomplices as Canadian Connor Riley Moucka, known as Waifu and Judische, and John Erin Binns, who used the nicknames irdev and j_irdev1337. They are linked to a series of massive attacks on Snowflake clients, during which the attackers stole terabytes of data from more than 165 organizations.
It's worth noting that Snowflake's platform is used by nearly 10,000 customers, including some of the world's largest companies, including Adobe, AT&T, Capital One, Doordash, HP, Instacart, JetBlue, Kraft Heinz, Mastercard, Micron, NBC Universal, Nielsen, Novartis, Okta, PepsiCo, Siemens, US Foods, Western Union, Yamaha, and others.
As a result, the attacks and data breaches affected hundreds of millions of people, including customers of giants like AT&T and Ticketmaster , as well as Santander , Pure Storage , Advance Auto Parts , Los Angeles Unified , QuoteWizard/LendingTree, and Neiman Marcus .
According to the case file , Wagenius participated in the development of the SSH Brute tool, which the attackers used to brute-force credentials to access victims' networks. The criminal group members exchanged stolen data via Telegram and coordinated their attacks there.
After infiltrating the victims' networks, the hackers stole data and then began blackmailing the affected companies. The attackers threatened to publish the stolen information on the hacking forums BreachForums and XSS, and in some cases, they put the stolen data up for sale, valuing it at several thousand US dollars. Some of the dumps were actually sold. Furthermore, the stolen information was subsequently used to conduct other attacks, including SIM swapping. In total, the group attempted to extort at least $1 million from the victims.
Also, according to court documents, in November 2024, Wagenius published confidential call details of an unnamed US official online and later threatened to disclose additional records.
Wagenius was arrested in Texas in December 2024. In February 2025, he pleaded guilty .in connection with the hacking of AT&T and Verizon and the transfer of confidential phone records. In July of that year, he also pleaded guilty to charges of aggravated identity theft, conspiracy to commit fraud, and extortion.
Now, in addition to seventy months in prison, the court has ordered Wagenius to pay $294,978 in restitution.
Investigators name Wagenius's accomplices as Canadian Connor Riley Moucka, known as Waifu and Judische, and John Erin Binns, who used the nicknames irdev and j_irdev1337. They are linked to a series of massive attacks on Snowflake clients, during which the attackers stole terabytes of data from more than 165 organizations.
It's worth noting that Snowflake's platform is used by nearly 10,000 customers, including some of the world's largest companies, including Adobe, AT&T, Capital One, Doordash, HP, Instacart, JetBlue, Kraft Heinz, Mastercard, Micron, NBC Universal, Nielsen, Novartis, Okta, PepsiCo, Siemens, US Foods, Western Union, Yamaha, and others.
As a result, the attacks and data breaches affected hundreds of millions of people, including customers of giants like AT&T and Ticketmaster , as well as Santander , Pure Storage , Advance Auto Parts , Los Angeles Unified , QuoteWizard/LendingTree, and Neiman Marcus .
According to the case file , Wagenius participated in the development of the SSH Brute tool, which the attackers used to brute-force credentials to access victims' networks. The criminal group members exchanged stolen data via Telegram and coordinated their attacks there.
After infiltrating the victims' networks, the hackers stole data and then began blackmailing the affected companies. The attackers threatened to publish the stolen information on the hacking forums BreachForums and XSS, and in some cases, they put the stolen data up for sale, valuing it at several thousand US dollars. Some of the dumps were actually sold. Furthermore, the stolen information was subsequently used to conduct other attacks, including SIM swapping. In total, the group attempted to extort at least $1 million from the victims.
Also, according to court documents, in November 2024, Wagenius published confidential call details of an unnamed US official online and later threatened to disclose additional records.
Wagenius was arrested in Texas in December 2024. In February 2025, he pleaded guilty .in connection with the hacking of AT&T and Verizon and the transfer of confidential phone records. In July of that year, he also pleaded guilty to charges of aggravated identity theft, conspiracy to commit fraud, and extortion.
Now, in addition to seventy months in prison, the court has ordered Wagenius to pay $294,978 in restitution.