U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S. Army soldier received 70 months for extorting AT&T and Verizon after stealing call metadata.
Cameron John Wagenius, a U.S. Army soldier known as Kiberphant0m, was sentenced in Seattle to 70 months in federal prison and ordered to pay $294,978 in restitution. While stationed in South Korea, he and alleged co-conspirators used exposed Snowflake credentials without MFA to steal data, including call and text metadata for more than 100 million AT&T customers, and extorted telecom firms including Verizon. AT&T had paid the extortion group $370,000 in Bitcoin. Prosecutors also said that while jailed he used other inmates' email to ask an AI tool for exploit assistance, including CVE-2023-45208.
- Cameron Wagenius, 22, sentenced to 70 months and $294,978 restitution
- He stole call and text metadata for more than 100 million AT&T customers
- AT&T paid a $370,000 Bitcoin ransom; Verizon was also extorted
- From jail he sought AI-generated exploit details, including CVE-2023-45208
- CVEs
- CVE-2023-45208
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-45208 | A command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers… | 8.8 | 2% | PoC |
From the original article
4 min read at krebsonsecurity.com
A U. S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims.
By BrianKrebs · krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.