Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies
A former U.S. Army soldier was sentenced to 70 months for extortion attacks on AT&T and Snowflake customers.
Cameron John Wagenius, 22, was sentenced to 70 months in prison and ordered to pay almost $295,000 in restitution after pleading guilty in July 2025. While on active duty, he and co-conspirators Connor Moucka and John Erin Binns stole credentials, broke into Snowflake customer environments, and attempted to extort organizations including AT&T, Ticketmaster, Advance Auto Parts, and Santander. Prosecutors said the group stole billions of records from more than 165 Snowflake customers and received over $2.5 million in extortion payments combined. Wagenius, known as kiberphant0m, used a tool called SSH Brute and leaked stolen call records tied to Donald Trump in failed attempts to extort $500,000 from AT&T.
- Wagenius was sentenced to 70 months and nearly $295,000 restitution.
- He and co-conspirators compromised more than 165 Snowflake customer environments.
- Named victims include AT&T, Ticketmaster, Advance Auto Parts, and Santander.
- Prosecutors said the group received over $2.5 million in extortion payments.
- He operated as kiberphant0m and used the SSH Brute credential tool.
- Vendors
- Snowflake
- Products
- Snowflake
- Threat actors
- Cameron WageniusConnor MouckaJohn Erin Binns
- Organizations
- U.S. Department of JusticeFBIU.S. Army
- Countries
- United StatesCanada
From the original article
4 min read at cyberscoop.com
Cameron Wagenius was involved in some of the most high-profile attacks of 2024 while on active duty. The post Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies appeared first on CyberScoop.
By Matt Kapko · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.