Fourth man pleads guilty in 'Celebgate' photo leak

George Garofano, 26, faces a maximum sentence of five years in prison for his role in leaking nude photos of celebrities to the public.

A Connecticut man pleaded guilty to charges of hacking into over 250 iCloud accounts as part of a phishing campaign that resulted in nude photographs of female celebrities being posted on the public internet.

George Garofano, 26, faces a maximum sentence of five years in prison.

Garofano was involved in an expansive phishing campaign from April 2013 to October 2014 that stole iCloud account information from victims, according to the plea agreement he signed on Thursday. The phishing emails pretended to be from Apple and asked victims to enter usernames and passwords which he then stole to illegally access their accounts.

“Garofano used the usernames and passwords to illegally access his victims’ iCloud accounts, which allowed him to steal personal information, including sensitive and private photographs and videos, according to his plea agreement,” according to a Department of Justice statement. “In some instances, Garofano traded the usernames and passwords, as well as the materials he stole from the victims, with other individuals.”

The incident became known as “Celebgate” where nude photos of females celebrities were spread across the internet, including popular forms on Reddit and 4chan.

This is the fourth case stemming from the Celebgate incident. Emilio Herrera, 32, pleaded guilty last year and will be sentenced next month for illegally accessing over 550 iCloud accounts. Edward Majerczyk, 28, pleaded guilty in 2016 and was sentenced to a nine month prison term last year. Ryan Collins, 36, also pleaded guilty and was sentenced to 18 months last year.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• The Collective Cyber Defense letter wrote your next vendor questionnaire

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure