Alleged 'Scattered Spider' Member Extradited to US (krebsonsecurity.com) 23
Investigative journalist and cybersecurity expert Brian Krebs reports: A 23-year-old Scottish man thought to be a member of the prolific Scattered Spider cybercrime group was extradited last week from Spain to the United States, where he is facing charges of wire fraud, conspiracy and identity theft. U.S. prosecutors allege Tyler Robert Buchanan and co-conspirators hacked into dozens of companies in the United States and abroad, and that he personally controlled more than $26 million stolen from victims. Scattered Spider is a loosely affiliated criminal hacking group whose members have broken into and stolen data from some of the world's largest technology companies. Buchanan was arrested in Spain last year on a warrant from the FBI, which wanted him in connection with a series of SMS-based phishing attacks in the summer of 2022 that led to intrusions at Twilio, LastPass, DoorDash, Mailchimp, and many other tech firms. The complain against Buchanan is available here (PDF).
Re: (Score:2)
Since Scotland is not a European member country, he was never going to be safe from extradition when in Spain. So perhaps you should view this as a cautionary tale about travelling to certain areas of which you don't know the laws?
Re: Should I bet outraged? (Score:3, Insightful)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
But the Scattered Spider gang member wouldn't escape jail even if he had chose to reside in a country not extraditing UK nationals. He would have been prosecuted by the national authorities (aut dedere aut judicare https://en.wikipedia.org/wiki/... [wikipedia.org] ), currently in the UN Convention against Transnational Organized Crime, article 16 https://www.unodc.org/e4j/en/o... [unodc.org] :
A State Party in whose territory an alleged offender is found, if it does not extradite such person in respect of an offence to which this article applies solely on the ground that he or she is one of its nationals, shall, at the request of the State Party seeking extradition, be obliged to submit the case without undue delay to its competent authorities for the purpose of prosecution.
(Roman Polanski wasn't judged in either of France, Poland, or Switzerland due to statute of limitations, possibly as well the absence of age of
Re: (Score:2)
In the event that the UK had stayed an EU member (or becomes one in the future) then it would be entitled to ask for its citizen to be sent back, afterwards extraditing him as deemed necessary. You are right about that. But it is not obvious to me that the UK would always ask.
As the UK is not a member and does not cooperate with the EU on law enforcement any more, it
Re: (Score:2)
Right, I just wanted to make sure your comment wouldn't be read as: France "lets rapists roam free" or "doesn't want to cooperate with the US / doesn't care about American victims". The reason Polanski is free is because the jurisdictions in which he has been travelling consider there is no prosecutable offence. Poland said there is no crime, Switzerland said the facts are too old.
France didn't have to answer these questions because extradition wasn't on the table, and there was no complaint filed to the l
Re: (Score:2)
Re: (Score:2)
Current version of Civil Code Art. 25 https://www.legifrance.gouv.fr... [legifrance.gouv.fr] says citizenship can be removed in cases of 1) "national interest" (treason, espionage, attacks against the territory, etc.), terrorism, 2) certain acts of corruption by civil servants, 3) draft evasion, 4) acts to the service of a Foreign state that are incompatible with the condition of a French citizen (e.g. fighting wars for them).
At the time of the facts (1977), there was a case nr. 5) "sentenced in France or abroad for facts Franc
How terrible! (Score:2)
I feel bad for him because now people know he's affiliated with idiots that willingly chose the name "scattered spider" for their organization. The shame must be unbearable.
Current hackers be dumb /s (Score:5, Informative)
‘Domain registration records from NameCheap for Phishing Domain 1 and Phishing Domain 2 showed that both domains were registered under the same NameCheap account (“Subject NameCheap Account”), which had the username bobsagetfaget and listed the account email address as lululongstaffihw98@gmail.com (“Subject Gmail Account”)’
“The NameCheap records also showed that less than one month before the phishing attacks, on May 4, 2022, the Subject NameCheap Account was logged in from the IP address (“BUCHANAN IP Address”).”
“Virgin Media records showed that the BUCHANAN IP Address was leased to BUCHANAN from January 26, 2022 to November 7, 2022.”
“Two of the devices contained information relating to a proton email address that had been used by BUCHANAN to book a flight, based on information provided by British Airways; this flight reservation was associated with BUCHANAN’s true U.K. passport number, based on information provided by Police Scotland.”
“The internet browser history from one of BUCHANAN’s devices showed that he accessed (i) a NameCheap registration and control panel page for Phishing Domain 2”
So they can act outside their borders? (Score:4, Insightful)
They can get this man from another country, but they can't get back one who was sent away in error (despite having a court order in place that disallowed that)
Re: (Score:3)
They can get this man from another country, but they can't get back one who was sent away in error (despite having a court order in place that disallowed that)
You're confusing "can't" with "won't".
Re: So they can act outside their borders? (Score:2)
Re: So they can act outside their borders? (Score:2)
Any evidence those are customary tats? All I can find are giant MS13 across peoples foreheads or entire upper bodies. Like literally one other picture of a person with those tats, anywhere.
The other stuff the guy was picked up for was stuff that happens to anybody. Half the people on my street and nearly all the ones in the trailer park at the end have some kind of issues with their spouse they've worked out at some point. I've read the police report, ripped shirt... ok. And a guy that was picked up at a d
Wait ... (Score:2)
I thought this administration was bent on deporting foreign criminals w/o due process, not importing them for due process.
A 23-year-old Scottish man ...
Oh, right... guessing he's not brown. /s
(Although, a little bronzer could fix that.)
Re: (Score:2)
And with only $26 million he can't afford the protection of adequate "campaign contributions". Besides, he worked for that money (well, sort of) rather than being born to it so any sort of protection is out the window.
Re: (Score:2)
I thought this administration was bent on deporting foreign criminals w/o due process, not importing them for due process.
Why do you assume he won't be sent straight to el Salvadore on arrival in the U.S.? Just having Scottish citizenship doesn't make him white. Also the Scottish people and Parliament have made it clear they don't want Trump to visit. So Trumpie has a "reason" to have a grudge.
is it Elon's turn to be prosecuted yet? (Score:2)