{"id":7405,"date":"2025-02-27T16:54:59","date_gmt":"2025-02-27T22:54:59","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=83690"},"modified":"2025-02-27T16:54:59","modified_gmt":"2025-02-27T22:54:59","slug":"army-soldier-linked-to-snowflake-attack-spree-allegedly-tried-to-sell-data-to-foreign-spies","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2025\/02\/27\/army-soldier-linked-to-snowflake-attack-spree-allegedly-tried-to-sell-data-to-foreign-spies\/","title":{"rendered":"Army soldier linked to Snowflake attack spree allegedly tried to sell data to foreign spies"},"content":{"rendered":"<p><head> <meta charset=\"UTF-8\"> <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"> <meta name=\"robots\" content=\"index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1\"> <!-- This site is optimized with the Yoast SEO Premium plugin v24.5 (Yoast SEO v24.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ --> <title>Army soldier linked to Snowflake attack spree allegedly tried to sell data to foreign spies | CyberScoop<\/title> <meta name=\"description\" content=\"Federal prosecutors accuse Cameron Wagenius of searching how to defect to Russia days after he tried to sell stolen data to a foreign intelligence service.\"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/army-soldier-alleged-cybercriminal-foreign-spies\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"Army soldier linked to Snowflake attack spree allegedly tried to sell data to foreign spies\"> <meta property=\"og:description\" content=\"Federal prosecutors accuse Cameron Wagenius of searching how to defect to Russia days after he tried to sell stolen data to a foreign intelligence service.\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/army-soldier-alleged-cybercriminal-foreign-spies\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:published_time\" content=\"2025-02-27T22:54:59+00:00\"> <meta property=\"article:modified_time\" content=\"2025-02-27T22:55:02+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/army-soldier-linked-to-snowflake-attack-spree-allegedly-tried-to-sell-data-to-foreign-spies-2.jpg\"> <meta property=\"og:image:width\" content=\"1920\"> <meta property=\"og:image:height\" content=\"1280\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"Matt Kapko\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <!-- \/ Yoast SEO Premium plugin. --> <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1739294329g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1739821441g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1740691656g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=a815169637cf454b7376\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" title=\"JSON\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/83690\"><link rel=\"EditURI\" type=\"application\/rsd+xml\" title=\"RSD\" href=\"https:\/\/cyberscoop.com\/xmlrpc.php?rsd\">\n<meta name=\"generator\" content=\"WordPress 6.7.2\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=83690\">\n<link rel=\"alternate\" title=\"oEmbed (JSON)\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Farmy-soldier-alleged-cybercriminal-foreign-spies%2F\">\n<link rel=\"alternate\" title=\"oEmbed (XML)\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Farmy-soldier-alleged-cybercriminal-foreign-spies%2F&amp;format=xml\"> <!-- Google Tag Manager --> <!-- End Google Tag Manager --> <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"post-template-default single single-post postid-83690 single-format-standard\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/army-soldier-alleged-cybercriminal-foreign-spies\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--event js-stickybar\">\n<div class=\"stickybar__details\" readability=\"5.12\">\n<div class=\"stickybar__info js-sticky-bar-content\" readability=\"32\">\n<p>Nominations can be submitted for the 2025 CyberScoop 50 awards!<\/p>\n<\/div>\n<p> <a class=\"stickybar__link button button-tertiary\" href=\"https:\/\/cyberscoop.com\/cyberscoop50\/\">Click here!<\/a> <\/div>\n<p> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"25.586206896552\">\n<div class=\"single-article__header-content\" readability=\"34.378378378378\">\n<ul class=\"single-article__eyebrow\">\n<li class=\"single-article__category\"> <a class=\"single-article__category-link\" href=\"https:\/\/cyberscoop.com\/army-soldier-alleged-cybercriminal-foreign-spies\/\"> <span>Cybercrime<\/span> <\/a> <\/li>\n<\/ul>\n<p> Federal prosecutors accuse Cameron Wagenius of searching how to defect to Russia days after he tried to sell stolen data to a foreign intelligence service. <\/p>\n<p> <!-- Listen to this article section --> <!-- Audio Element --><br \/>\n<audio id=\"audio-player\" src=\"https:\/\/wp-tts-cdn.api.scpnewsgrp.com\/cyberscoop\/83690\/english.openai.mp3\"><\/audio> <\/p>\n<div readability=\"11\">\n<div>\n<p>Listen to this article<\/p>\n<p> <!-- Countdown Timer --> <\/p>\n<p>0:00<\/p>\n<\/p><\/div>\n<p> <!-- Tooltip --> <\/p>\n<p> <span id=\"tts-tooltip\">Learn more.<\/span> <span> This feature uses an automated voice, which may result in occasional errors in pronunciation, tone, or sentiment. <\/span> <\/p>\n<\/div>\n<p> <!-- End of audio player --> <\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"426\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/army-soldier-linked-to-snowflake-attack-spree-allegedly-tried-to-sell-data-to-foreign-spies.jpg?resize=640%2C426&#038;ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/army-soldier-linked-to-snowflake-attack-spree-allegedly-tried-to-sell-data-to-foreign-spies-2.jpg 1920w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/army-soldier-linked-to-snowflake-attack-spree-allegedly-tried-to-sell-data-to-foreign-spies-2.jpg?resize=300,200 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/army-soldier-linked-to-snowflake-attack-spree-allegedly-tried-to-sell-data-to-foreign-spies-2.jpg?resize=768,512 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/army-soldier-linked-to-snowflake-attack-spree-allegedly-tried-to-sell-data-to-foreign-spies-2.jpg?resize=1024,683 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/army-soldier-linked-to-snowflake-attack-spree-allegedly-tried-to-sell-data-to-foreign-spies-2.jpg?resize=1536,1024 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/army-soldier-linked-to-snowflake-attack-spree-allegedly-tried-to-sell-data-to-foreign-spies-2.jpg?resize=600,400 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/army-soldier-linked-to-snowflake-attack-spree-allegedly-tried-to-sell-data-to-foreign-spies-2.jpg?resize=252,168 252w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/army-soldier-linked-to-snowflake-attack-spree-allegedly-tried-to-sell-data-to-foreign-spies-2.jpg?resize=506,337 506w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/army-soldier-linked-to-snowflake-attack-spree-allegedly-tried-to-sell-data-to-foreign-spies-2.jpg?resize=1013,675 1013w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/army-soldier-linked-to-snowflake-attack-spree-allegedly-tried-to-sell-data-to-foreign-spies-2.jpg?resize=1265,843 1265w\" sizes=\"(max-width: 1013px) 100vw, 1013px\"><figcaption> The Department of Justice building is pictured in Washington, DC, on January 22, 2022. (Photo by STEFANI REYNOLDS\/AFP via Getty Images) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"49.941443143181\"><body readability=\"102.30712634013\"><\/p>\n<p>U.S. authorities say a 21-year-old U.S. Army soldier attempted to sell stolen sensitive information to a foreign intelligence service as part of a broader effort to extort victims and leak call records of high-ranking public officials.<\/p>\n<p>In November while on active duty, Cameron Wagenius made multiple attempts to extort $500,000 from a major telecommunications company while threatening to leak additional phone records belonging to the same high-ranking officials, according to <a href=\"https:\/\/storage.courtlistener.com\/recap\/gov.uscourts.wawd.343000\/gov.uscourts.wawd.343000.30.0.pdf\">court documents<\/a> filed Wednesday in the U.S. District Court for the Western District of Washington.&nbsp;<\/p>\n<p>Authorities did not name Wagenius\u2019 alleged victims in court filings, but Allison Nixon, chief research officer at Unit 221B, confirmed to CyberScoop that AT&amp;T is the telecom company he tried to extort for ransom. Wagenius previously filed a notice of intent to plead guilty to unlawfully posting and transferring confidential phone records.<\/p>\n<p>The criminal activities alleged against Wagenius underscore the bold actions cybercriminals will take to extort victims and evade capture.&nbsp;<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Throughout most of November, Wagenius communicated with an email address he believed belonged to a foreign intelligence service in an attempt to sell stolen data, prosecutors allege. Soon after this communication stopped, he allegedly queried a search engine for \u201ccan hacking be treason.\u201d<\/p>\n<p>Wagenius conducted multiple online searches in October, indicating a desire to flee the United States and defect to Russia, according to court documents. Wagnenius is also accused of searching for \u201cwhere can I defect the U.S. government military which country will not hand me over.\u201d<\/p>\n<p>Authorities didn\u2019t identify the nation in the court filing, but said Wagenius searched for information about defecting to the same country he attempted to sell stolen information to in November.<\/p>\n<p>\u201cWhile financially motivated cybercriminals have always been opportunistic and sought to evade capture, this case shows potential crossover into national security threats,\u201d Austin Larsen, principal threat analyst at Google Threat Intelligence Group, said in an email. \u201cThe alleged attempt to sell data to a foreign intelligence service isn\u2019t just about financial gain \u2014 it indicates a willingness to engage with state-level actors, blurring the lines with espionage.\u201d<\/p>\n<p>Wagenius\u2019 alleged actions \u201creveals how financially motivated cybercrime can directly intersect with and undermine national security interests,\u201d Larsen said.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Some of the records allegedly in Wagenius\u2019 possession were stolen last year in an attack spree targeting as many as <a href=\"https:\/\/cyberscoop.com\/as-many-as-165-companies-potentially-exposed-in-snowflake-related-attacks-mandiant-says\/\">165 organizations that stored data on Snowflake<\/a>, according to cybercrime researchers. Wagenius\u2019 alleged co-conspirators, Connor Moucka and John Binns, were <a href=\"https:\/\/cyberscoop.com\/connor-moucka-snowflake-data-breach-indictment-john-binns\/\">indicted in November<\/a> for allegedly extorting more than 10 organizations after breaking into cloud platforms used by AT&amp;T and other major companies.&nbsp;<\/p>\n<p>AT&amp;T in July confirmed cybercriminals accessed the company\u2019s Snowflake environment in April and stole six months of phone and text records of <a href=\"https:\/\/cyberscoop.com\/att-data-breach-snowflake\/\">\u201cnearly all\u201d of its customers<\/a>.<\/p>\n<p>\u201cIt was all part of the same criminal conspiracy, and they worked together to abuse data for commercial gain,\u201d Nixon said.<\/p>\n<p>\u201cThis case further underscores the need to recognize this online gang culture \u2014 \u2018<a href=\"https:\/\/cyberscoop.com\/tag\/the-com\/\">The Com<\/a>\u2019 \u2014 that\u2019s springing up right under our noses. It\u2019s not only an external security threat, but an insider threat,\u201d she added. \u201cThis Army soldier effectively had gang affiliations, which is a huge risk for the special access he had.\u201d&nbsp;<\/p>\n<p>Wagenius, who identified himself as kiperphant0m and cyb3rph4nt0m on online criminal forums, has conducted extensive malicious cyber activity for years, prosecutors allege in the court filing arguing for his continued detention. Wagenius \u201cpresents a serious risk of flight, has the means and intent to flee, and is aware that he will likely face additional charges,\u201d prosecutors said in the filing.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Federal law enforcement seized Wagenius\u2019 devices Dec. 4 and later found evidence indicating he had access to thousands of stolen identification documents and large amounts of cryptocurrency. Days later, Wagenius purchased a new laptop, against his commanding officer\u2019s order, and used it every day over a five-day period in the barracks at Fort Cavazos in Texas with VPN software to hide his identity and location, according to court documents.&nbsp;<\/p>\n<p>\u201cThere has been a historical lack of deterrence against cybercrime, from a combination of low arrest rates and courts failing to take victims seriously. This is why they escalate,\u201d Nixon said. \u201cI don\u2019t think cybercriminals understand the blowback that\u2019s coming because of their escalation.\u201d<\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"3.3582089552239\">\n<div class=\"author-card\" readability=\"14\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/army-soldier-linked-to-snowflake-attack-spree-allegedly-tried-to-sell-data-to-foreign-spies-1.jpg?w=640&#038;ssl=1\" alt=\"Matt Kapko\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by Matt Kapko<\/h4>\n<p> Matt Kapko is a reporter at CyberScoop. His beat includes cybercrime, ransomware, software defects and vulnerability (mis)management. The lifelong Californian started his journalism career in 2001 with previous stops at Cybersecurity Dive, CIO, SDxCentral and RCR Wireless News. Matt has a degree in journalism and history from Humboldt State University. <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p> <!-- Start of HubSpot Embed Code --> <!-- End of HubSpot Embed Code --> <\/body> <a href=\"https:\/\/cyberscoop.com\/army-soldier-alleged-cybercriminal-foreign-spies\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Army soldier linked to Snowflake attack spree allegedly tried to<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1753,282,78,895,338,3729,46,256,270,2152,288,3797],"tags":[1756,286,86,902,341,3731,54,262,276,2156,294,3798],"class_list":["post-7405","post","type-post","status-publish","format-standard","hentry","category-cyber-espionage","category-cybercrime","category-cybersecurity","category-data-theft","category-department-of-justice-doj","category-google-threat-intelligence-group","category-ransomware","category-research","category-russia","category-snowflake","category-threats","category-unit-221b","tag-cyber-espionage","tag-cybercrime","tag-cybersecurity","tag-data-theft","tag-department-of-justice-doj","tag-google-threat-intelligence-group","tag-ransomware","tag-research","tag-russia","tag-snowflake","tag-threats","tag-unit-221b"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cyber-espionage\/\" rel=\"category tag\">cyber espionage<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybercrime\/\" rel=\"category tag\">cybercrime<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybersecurity\/\" rel=\"category tag\">Cybersecurity<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/data-theft\/\" rel=\"category tag\">Data theft<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/department-of-justice-doj\/\" rel=\"category tag\">Department of Justice (DOJ)<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/google-threat-intelligence-group\/\" rel=\"category tag\">Google Threat Intelligence Group<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/ransomware\/\" rel=\"category tag\">ransomware<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/research\/\" rel=\"category tag\">Research<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/russia\/\" rel=\"category tag\">Russia<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/snowflake\/\" rel=\"category tag\">Snowflake<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/threats\/\" rel=\"category tag\">Threats<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/unit-221b\/\" rel=\"category tag\">Unit 221B<\/a>","tag_info":"Unit 221B","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/7405","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=7405"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/7405\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=7405"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=7405"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=7405"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}