Ethical Hacking News
A former US Army soldier has been sentenced to 70 months in prison for his role in a large-scale telecom hacking campaign. The campaign, which targeted at least ten organizations and sought over $1 million in ransom payments, used a variety of methods to obtain login credentials and stole hundreds of thousands of customer records. The group's actions were motivated by greed and a desire for notoriety, and the case highlights the risks associated with insider threats and the importance of protecting sensitive information.
Cameron John Wagenius, a 22-year-old former soldier, was sentenced to 70 months in prison for his role in a large-scale telecom hacking campaign. The campaign targeted at least ten organizations and sought over $1 million in ransom payments, using a hacking tool called SSH Brute to obtain login credentials. The group traded hundreds of credentials and stole hundreds of thousands of customer records, selling them on the dark web for profit. The campaign was carried out while Wagenius was stationed in South Korea and Texas, and its actions were motivated by greed and a desire for notoriety. The case highlights the risks associated with insider threats and the importance of protecting sensitive information. The group attempted to extort at least $1 million and sold some of the stolen data for a significant amount of money. The case raises questions about the role of social media and online platforms in facilitating malicious activities.
A recent conviction has highlighted the consequences of a former soldier's involvement in a large-scale telecom hacking campaign. Cameron John Wagenius, a 22-year-old ex-soldier, was sentenced to 70 months in prison for his role in the campaign, which targeted at least ten organizations and sought over $1 million in ransom payments.
Wagenius, who was serving on active duty at the time of the campaign, used a hacking tool called SSH Brute to obtain login credentials for the protected networks of his targets. He and his co-conspirators traded hundreds of credentials and stole hundreds of thousands of customer records from multiple companies, some of which were then sold on the dark web for profit. The group also used the stolen data to commit fraud, including SIM swapping, and threatened to publish it unless victims paid.
The campaign, which took place between April 2023 and December 2024, was carried out while Wagenius was stationed in South Korea and Texas. The Justice Department has not publicly identified the victims, but court documents indicate that they were US and overseas telecommunications companies and other organizations.
Wagenius and his accomplices used a variety of methods to obtain the login credentials, including using online aliases and Telegram group chats. They also advertised the stolen data on websites such as XSS, BreachForums, and X, and threatened to publish it unless victims paid. The group's actions were motivated by greed and a desire for notoriety, according to US District Judge Lauren King, who presided over Wagenius's sentencing.
The case highlights the risks associated with insider threats and the importance of protecting sensitive information. It also underscores the need for organizations to implement robust security measures to prevent similar attacks in the future.
In addition to Wagenius's sentence, the group's actions also led to significant financial losses for the victims. The Justice Department reported that the group attempted to extort at least $1 million in total, and that some of the stolen data was sold for a significant amount of money.
The case also raises questions about the role of social media and online platforms in facilitating malicious activities. The group used Telegram group chats and other online platforms to exchange stolen credentials and advertise the stolen data, highlighting the need for these platforms to take steps to prevent the spread of malicious content.
Overall, Wagenius's conviction serves as a reminder of the consequences of cybercrime and the importance of protecting sensitive information. It also highlights the need for organizations to implement robust security measures to prevent similar attacks in the future.
Related Information:
https://www.ethicalhackingnews.com/articles/Unpacking-the-Consequences-of-a-Former-Soldiers-Telecom-Hacking-Spree-ehn.shtml
https://www.theregister.com/cyber-crime/2026/09/28/ex-soldiers-telecom-hacking-spree-earns-him-70-months/5299440
Published: Mon Sep 28 10:02:05 2026 by llama3.2 3B Q4_K_M
