Former US soldier sentenced to 70 months for telecom extortion
First coverage.
Former US Army soldier Cameron Wagenius, 22, received 70 months and $294,978 restitution for telecom hacking and attempted extortion.
Former U.S. Army soldier Cameron John Wagenius, 22, was sentenced to 70 months in prison and ordered to pay $294,978 in restitution, according to reports citing a September 25 Justice Department announcement. While on active duty from April 2023 through December 2024—including postings in South Korea and at Fort Cavazos in Texas—he and accomplices, described in one report as operating as kiberphant0m, used a tool called SSH Brute and stolen credentials to breach at least 10 organizations, take sensitive telecom and customer records, sell or advertise data, and seek at least $1 million. The scheme exposed a U.S. government official’s call records; The Register also reports hundreds of thousands of customer records stolen and SIM-swapping fraud. Sources link the case to the 2024 Snowflake extortion campaign and name AT&T, but they differ on whether Verizon and T-Mobile were Wagenius’s targets or those of named co-conspirators, and on scale—The Record says more than 100 Snowflake customers. SecurityWeek says he pleaded guilty to wire fraud conspiracy and extortion and names Connor Riley Moucka and John Erin Binns among conspirators, while The Record lists wire fraud, extortion, and aggravated identity theft and says he tried to sell stolen information to a foreign military intelligence service.
- Cameron John Wagenius, 22, a former active-duty U.S. Army soldier, was sentenced to 70 months and ordered to pay $294,978 in restitution (The Record said nearly $295,000).
- The conduct ran from April 2023 to December 2024 (The Record: through December 18, 2024) while he was stationed in South Korea and at Fort Cavazos, Texas.
- He and others, using the alias kiberphant0m in one account, used SSH Brute and stolen credentials against at least 10 organizations and sought at least $1 million.
- They stole telecom and customer records—including hundreds of thousands of records in The Register’s account—sold or advertised data on BreachForums and XSS.is, and, per The Register, used some records for SIM-swapping fraud.
- The case is linked to the 2024 Snowflake extortion campaign; reports name AT&T, and variously Verizon or T-Mobile, with The Record citing more than 100 Snowflake customers.
- SecurityWeek names co-conspirators Connor Riley Moucka of Canada and U.S. citizen John Erin Binns; The Register refers to three co-conspirators without naming them all.
- Plea details differ: SecurityWeek reports wire fraud conspiracy and extortion; The Record reports wire fraud, extortion, and aggravated identity theft.
- Prosecutors said he tried to sell stolen records to a foreign military intelligence service, and the scheme exposed a U.S. government official’s sensitive call data; reports cite a September 25 Justice Department announcement.
- Products
- Snowflake
- Countries
- United StatesSouth KoreaCanadaTurkey
Coverage
oldest first · one row per article · UTCEx-soldier's telecom hacking spree earns him 70 months
Former US soldier Cameron Wagenius was sentenced to 70 months for hacking telecom firms and seeking $1 million.
Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon
A former US soldier received 70 months for hacking AT&T and Verizon and extorting victims.