AT&T (Victim): news timeline & CVEs

U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

A U.S. Army soldier received 70 months for extorting AT&T and Verizon after stealing call metadata.

Cameron John Wagenius, a U.S. Army soldier known as Kiberphant0m, was sentenced in Seattle to 70 months in federal prison and ordered to pay $294,978 in restitution. While stationed in South Korea, he and alleged co-conspirators used exposed Snowflake credentials without MFA to steal data, including call and text metadata for more than 100 million AT&T customers, and extorted telecom firms including Verizon. AT&T had paid the extortion group $370,000 in Bitcoin. Prosecutors also said that while jailed he used other inmates' email to ask an AI tool for exploit assistance, including CVE-2023-45208.

Krebs on SecuritySep 25, 21:44 UTC · 1d agoPolicy & legal 2 sources CVE-2023-452081

Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies

A former U.S. Army soldier was sentenced to 70 months for extortion attacks on AT&T and Snowflake customers.

Cameron John Wagenius, 22, was sentenced to 70 months in prison and ordered to pay almost $295,000 in restitution after pleading guilty in July 2025. While on active duty, he and co-conspirators Connor Moucka and John Erin Binns stole credentials, broke into Snowflake customer environments, and attempted to extort organizations including AT&T, Ticketmaster, Advance Auto Parts, and Santander. Prosecutors said the group stole billions of records from more than 165 Snowflake customers and received over $2.5 million in extortion payments combined. Wagenius, known as kiberphant0m, used a tool called SSH Brute and leaked stolen call records tied to Donald Trump in failed attempts to extort $500,000 from AT&T.

CyberScoopupdated Sep 25, 21:44 UTC · 1d agofirst Sep 25, 21:28 UTC · 1d agoPolicy & legal 2 sources1

Lawmakers introduce bill for voluntary telecom cyber rules after Salt Typhoon hacks

Sens. Warner and Cruz introduced a bill for voluntary telecom cybersecurity practices after Salt Typhoon.

U.S. Sens. Mark Warner and Ted Cruz introduced the Telecommunications Cybersecurity and Resilience Act to create voluntary cybersecurity best practices and an optional third-party certification for telecom companies. The bill would form a working group inside the NTIA to draft sector-specific practices, review them every two years, and report annually to Congress. It follows Salt Typhoon, in which China-backed hackers held years-long access to at least nine U.S. carriers, including Verizon, AT&T, and Lumen, collecting call detail records and sometimes intercepting audio and text tied to about 150 high-profile targets. The proposal comes nearly a year after earlier mandatory telecom cybersecurity rules adopted after those intrusions were scrapped.

The RecordSep 24, 20:15 UTC · 2d agoPolicy & legal 2 sources

AT&T

Timeline3 articles

Related CVEsby mentions

Appears with

U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies

Lawmakers introduce bill for voluntary telecom cyber rules after Salt Typhoon hacks