Ethical Hacking News
Scot pleads guilty to $8 million virtual currency theft, bringing total losses at Scattered Spider cybercrime crew to over $11 million. Tyler Buchanan faces up to 22 years in prison for his role in the operation.
Buchanan, a 24-year-old Scotsman, was linked to the Scattered Spider cybercrime crew and pleaded guilty to stealing $8 million in virtual currency. Buchanan joined forces with other members of Scattered Spider in 2021, carrying out sophisticated SIM swapping attacks on prominent companies. He worked behind the scenes, creating and managing infrastructure to support phishing attacks and using aliases to evade detection. Buchanan's role in the operation resulted in significant losses for affected parties, including MGM Resorts and Caesars Entertainment. His guilty plea marks an important development in dismantling Scattered Spider, with his sentencing set for August 21, 2026.
In the world of cybercrime, there exist individuals who orchestrate complex operations that leave law enforcement agencies scrambling to keep up. One such individual is Tyler Robert Buchanan, a 24-year-old Scotsman who has been linked to the notorious Scattered Spider cybercrime crew. Buchanan's involvement in the operation has led to a staggering $8 million in stolen virtual currency, and his guilty plea in the United States marks a significant milestone in the ongoing efforts to dismantle this group.
Buchanan's rise to prominence began in 2021, when he allegedly joined forces with other members of Scattered Spider. During this period, the group carried out a series of sophisticated SIM swapping attacks, which they used to socially engineer their way into launching financially driven cyberattacks. The victims of these attacks included several prominent companies, such as MGM Resorts and Caesars Entertainment, both of which were part of the infamous Las Vegas Casino ransomware attacks of 2023.
The group's modus operandi was well-known among cybersecurity professionals, who described them as "SIM swappers" who used their skills to gain unauthorized access to victims' mobile telephone numbers. This allowed them to conduct further phishing schemes and launch financially driven cyberattacks that resulted in significant losses for the affected parties.
Buchanan's involvement in these operations extended beyond the initial phase of Scattered Spider. He allegedly worked behind the scenes, creating, managing, and paying for infrastructure such as domain names and copycat websites to support the phishing attacks. His role in this operation was further exemplified by his use of aliases, including "Dread Pirate Roberts," "Evefan," and "tylerb."
The $8 million that Buchanan pleaded guilty to stealing came from individuals whose cryptocurrency wallets he raided while using data stolen from companies and Scattered Spider's familiar methods. This represents just a fraction of the total losses incurred by the group during their year-and-a-half operation, which saw them steal at least $11 million in virtual currency.
The Department of Justice (DoJ) took notice of Buchanan's activities, and he was formally identified after his extradition from Spain to the United States in April 2025. His identity had been withheld from Spanish police reports, which only mentioned the arrest of a 22-year-old Brit with alleged ties to serious cybercrime.
In March 2026, Tyler Buchanan admitted to being part of the group that defrauded at least a dozen US companies, their employees, and various individuals. He further admitted involvement in thefts totaling at least $8 million in virtual currency.
Buchanan's guilty plea marks an important development in the ongoing efforts to dismantle Scattered Spider. His sentencing is set for August 21, 2026, and he faces a statutory maximum prison sentence of 22 years for his crimes.
In related news, Noah Michael Urban, the first Scattered Spider leader to plead guilty in the United States, is currently serving a 10-year prison sentence handed to him in August 2025. Three other alleged co-conspirators, Ahmed Hossam Eldin Elbadawy, Evans Onyeaka Osiebo, and Joel Martin Evans, still face criminal charges.
Buchanan's case serves as a reminder of the importance of cybersecurity awareness and the need for individuals to be vigilant when it comes to protecting their personal data. As technology continues to advance at an unprecedented rate, it is essential that we remain proactive in protecting ourselves against the growing threats posed by cybercrime.
The Register's coverage of this story will continue to provide updates as more information becomes available.
Related Information:
https://www.ethicalhackingnews.com/articles/A-Scottish-Scourge-The-Rise-and-Fall-of-Tyler-Buchanan-a-Mastermind-in-Cybercrime-ehn.shtml
https://go.theregister.com/feed/www.theregister.com/2026/04/20/scattered_spider_linked_scot_plead_guilty/
https://www.theregister.com/2026/04/20/scattered_spider_linked_scot_plead_guilty/
https://netcrook.com/british-hacker-scattered-spider-8m-guilty/
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-320a
https://en.wikipedia.org/wiki/Scattered_Spider
Published: Mon Apr 20 13:21:32 2026 by llama3.2 3B Q4_K_M
