Former Army soldier pleads guilty to widespread attack spree linked to AT&T, Snowflake and others | CyberScoop<\/title> <meta name=\"description\" content=\"Cameron Wagenius faces a maximum of 27 years in prison. A researcher that helped with the investigation called this \u2018one of the most significant wins in the fight against cybercrime.'\"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/cameron-wagenius-att-snowflake-guilty-plea\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"Former Army soldier pleads guilty to widespread attack spree linked to AT&T, Snowflake and others\"> <meta property=\"og:description\" content=\"Cameron Wagenius faces a maximum of 27 years in prison. A researcher that helped with the investigation called this \u2018one of the most significant wins in the fight against cybercrime.'\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/cameron-wagenius-att-snowflake-guilty-plea\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cyberscoop\/\"> <meta property=\"article:published_time\" content=\"2025-07-15T22:35:53+00:00\"> <meta property=\"article:modified_time\" content=\"2025-07-15T22:35:56+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-5.jpg\"> <meta property=\"og:image:width\" content=\"1920\"> <meta property=\"og:image:height\" content=\"1280\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"Matt Kapko\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:creator\" content=\"@CyberScoopNews\"> <meta name=\"twitter:site\" content=\"@CyberScoopNews\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1752617955g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1752617143g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1752075323g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=13897d660a0ac2c9c7d1\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" title=\"JSON\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/85189\"><link rel=\"EditURI\" type=\"application\/rsd+xml\" title=\"RSD\" href=\"https:\/\/cyberscoop.com\/xmlrpc.php?rsd\">\n<meta name=\"generator\" content=\"WordPress 6.8.2\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=85189\">\n<link rel=\"alternate\" title=\"oEmbed (JSON)\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fcameron-wagenius-att-snowflake-guilty-plea%2F\">\n<link rel=\"alternate\" title=\"oEmbed (XML)\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fcameron-wagenius-att-snowflake-guilty-plea%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"wp-singular post-template-default single single-post postid-85189 single-format-standard wp-theme-scoopnewsgroup wp-child-theme-cyberscoop\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/cameron-wagenius-att-snowflake-guilty-plea\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--event js-stickybar\">\n<div class=\"stickybar__details\" readability=\"4.9180327868852\">\n<div class=\"stickybar__info js-sticky-bar-content\" readability=\"32\">\n<p>Voting is open for the 2025 CyberScoop 50 awards!<\/p>\n<\/div>\n<p> <a class=\"stickybar__link button button-tertiary\" href=\"https:\/\/cyberscoop.com\/cyberscoop50\/\">Click here!<\/a> <\/div>\n<p> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"25.600169779287\">\n<div class=\"single-article__header-content\" readability=\"34.487394957983\">\n<ul class=\"single-article__eyebrow\">\n<li class=\"single-article__category\"> <a class=\"single-article__category-link\" href=\"https:\/\/cyberscoop.com\/cameron-wagenius-att-snowflake-guilty-plea\/\"> <span>Cybercrime<\/span> <\/a> <\/li>\n<\/ul>\n<p> Cameron Wagenius faces a maximum of 27 years in prison. A researcher that helped with the investigation called this \u2018one of the most significant wins in the fight against cybercrime.’ <\/p>\n<p>  <br \/>\n<audio id=\"audio-player\" src=\"https:\/\/wp-tts-cdn.api.scpnewsgrp.com\/cyberscoop\/85189\/english.openai.mp3\"><\/audio> <\/p>\n<div readability=\"11\">\n<div>\n<p>Listen to this article<\/p>\n<p>  <\/p>\n<p>0:00<\/p>\n<\/p><\/div>\n<p>  <\/p>\n<p> <span id=\"tts-tooltip\">Learn more.<\/span> <span> This feature uses an automated voice, which may result in occasional errors in pronunciation, tone, or sentiment. <\/span> <\/p>\n<\/div>\n<p>  <\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"426\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others.jpg?resize=640%2C426&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-5.jpg 1920w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-5.jpg?resize=300,200 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-5.jpg?resize=768,512 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-5.jpg?resize=1024,683 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-5.jpg?resize=1536,1024 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-5.jpg?resize=600,400 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-5.jpg?resize=252,168 252w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-5.jpg?resize=506,337 506w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-5.jpg?resize=1013,675 1013w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-5.jpg?resize=1265,843 1265w\" sizes=\"(max-width: 1013px) 100vw, 1013px\"><figcaption> The U.S. Department of Justice is seen on June 20, 2023 in Washington, DC. (Photo by Kevin Dietsch\/Getty Images) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"44.050529747351\"><body readability=\"89.992248062016\"><\/p>\n<p>A 21-year-old <a href=\"https:\/\/www.justice.gov\/opa\/pr\/former-us-soldier-pleads-guilty-hacking-and-extortion-scheme-involving-telecommunications\">former Army soldier pleaded guilty<\/a> Tuesday to charges stemming from a series of attacks and extortion attempts last year on telecommunications companies, including AT&T. <\/p>\n<p>Cameron John Wagenius, who identified himself as \u201ckiberphant0m\u201d and \u201ccyb3rph4nt0m\u201d on online criminal forums, conducted extensive malicious activity for years, including while he was on active duty, the Justice Department said. <\/p>\n<p>Wagenius pleaded guilty to conspiring to commit wire fraud, extortion in relation to computer fraud and aggravated identity theft. He faces a maximum of 27 years in prison for the charges and is scheduled for sentencing on Oct. 6. Wagenius previously pleaded guilty to two counts of unlawful transfer of confidential phone records information in connection with this conspiracy, the Justice Department said.<\/p>\n<p>\u201cThis is one of the most significant wins in the fight against cybercrime,\u201d Allison Nixon, chief research officer at Unit 221B, told CyberScoop. \u201cThe cybersecurity workers helping the victims through a storm, federal law enforcement with the fastest federal arrest I have ever witnessed, and the prosecutors now destroying them in court \u2014 all brought their A game and they deserve to celebrate tonight.\u201d<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Details prosecutors shared about Wagenius as part of their ongoing investigation underscore the bold actions cybercriminals take to extort multiple victims at scale and evade capture. Prior to his arrest in December, Wagenius attempted to sell stolen information <a href=\"https:\/\/cyberscoop.com\/army-soldier-alleged-cybercriminal-foreign-spies\/\">to a foreign intelligence service<\/a> as part of a broader attempt to defect to Russia or another country that he believed would allow him to avoid arrest.<\/p>\n<p>Officials said Wagenius and co-conspirators attempted to defraud at least 10 victim organizations by obtaining login credentials for the organizations\u2019 networks. In November, Wagenius made multiple attempts to extort $500,000 from a major telecommunications company while threatening to leak call records of high-ranking public officials, according to <a href=\"https:\/\/storage.courtlistener.com\/recap\/gov.uscourts.wawd.343000\/gov.uscourts.wawd.343000.30.0.pdf\">court documents<\/a> filed in February.<\/p>\n<p>\u201c[Wagenius\u2019] greatest significance is in how absolutely destroyed he\u2019s getting,\u201d Nixon said, adding that he was part of a gang that made threats against Nixon and Unit221B, which specializes in breaking the anonymity of English-speaking cybercriminals.<\/p>\n<p>\u201cHe was in the Army, living on base in Texas, when he leaked the hacked call records of President Trump and his family in a failed bid to extort AT&T,\u201d Nixon said. \u201cHe pled guilty without even a plea bargain, and the government might still file additional charges. Amazing.\u201d<\/p>\n<p>Authorities did not name Wagenius\u2019 alleged victims in court filings. AT&T in July confirmed cybercriminals accessed the company\u2019s Snowflake environment in April and stole six months of phone and text records of <a href=\"https:\/\/cyberscoop.com\/att-data-breach-snowflake\/\">\u201cnearly all\u201d of its customers<\/a>. <\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Wagenius\u2019 alleged co-conspirators, Connor Moucka and John Binns, were <a href=\"https:\/\/cyberscoop.com\/connor-moucka-snowflake-data-breach-indictment-john-binns\/\">indicted in November<\/a> for allegedly extorting more than 10 organizations after breaking into cloud platforms used by AT&T and other major companies. Moucka, a Canadian citizen, consented to extradition to the United States in March to face 20 federal charges stemming from his alleged involvement in a series of <a href=\"https:\/\/cyberscoop.com\/as-many-as-165-companies-potentially-exposed-in-snowflake-related-attacks-mandiant-says\/\">attacks targeting as many as 165 Snowflake customers<\/a>, one of the most widespread and damaging attack sprees on record.<\/p>\n<p>Some of the records allegedly in Wagenius\u2019 possession were stolen in the attack spree on Snowflake customer databases, according to cybercrime researchers. Federal law enforcement also found evidence on seized Wagenius\u2019 devices indicating he had access to thousands of stolen identification documents and large amounts of cryptocurrency.<\/p>\n<p>Justice Department officials said Wagnius and his co-conspirators attempted to extort at least $1 million from victim data owners. \u201cThey successfully sold at least some of this stolen data and also used stolen data to perpetuate other frauds, including SIM-swapping,\u201d officials said in a news release.<\/p>\n<p>\u201cCybercriminals are shockingly slow to update their threat model, and still operate on the assumption that they won\u2019t be jailed and will get a job in the industry afterwards,\u201d Nixon said. \u201cAs multi-decade sentences pile up, reality will set in: Brazen cybercriminals are much more likely to die in prison than they used to, and anonymity isn\u2019t real.\u201d<\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"3.4548944337812\">\n<div class=\"author-card\" readability=\"14\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-1.jpg?w=640&ssl=1\" alt=\"Matt Kapko\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by Matt Kapko<\/h4>\n<p> Matt Kapko is a reporter at CyberScoop. His beat includes cybercrime, ransomware, software defects and vulnerability (mis)management. The lifelong Californian started his journalism career in 2001 with previous stops at Cybersecurity Dive, CIO, SDxCentral and RCR Wireless News. Matt has a degree in journalism and history from Humboldt State University. <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<div class=\"popular-stories popular-stories--single-post\">\n<div class=\"popular-stories__container\">\n<h2 class=\"popular-stories__title\"> More Scoops <\/h2>\n<div class=\"popular-stories__stories\">\n<div class=\"popular-stories__cards\">\n<article class=\"post-item post-item--popular-stories-cards \" readability=\"20.227272727273\">\n<figure class=\"post-item__thumbnail\"> <a class=\"post-item__thumbnail-link\" href=\"https:\/\/cyberscoop.com\/intelbroker-cybercriminal-kai-west-arrested\/\" tabindex=\"-1\"> <img data-recalc-dims=\"1\" loading=\"lazy\" width=\"506\" height=\"337\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-2.jpg?resize=506%2C337&ssl=1\" class=\"attachment-ratio-16-9-md size-ratio-16-9-md wp-post-image\" alt decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-6.jpg 1920w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-6.jpg?resize=300,200 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-6.jpg?resize=768,512 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-6.jpg?resize=1024,683 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-6.jpg?resize=1536,1024 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-6.jpg?resize=600,400 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-6.jpg?resize=252,168 252w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-6.jpg?resize=506,337 506w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-6.jpg?resize=1013,675 1013w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-6.jpg?resize=1265,843 1265w\" sizes=\"auto, (max-width: 506px) 100vw, 506px\"> <\/a><figcaption class=\"screen-reader-text\"> The Department of Justice building is pictured in Washington, DC, on January 22, 2022. (Photo by STEFANI REYNOLDS\/AFP via Getty Images) <\/figcaption><\/figure>\n<header class=\"post-item__meta\" readability=\"2.8854625550661\">\n<h3 class=\"post-item__title\"> <a class=\"post-item__title-link\" href=\"https:\/\/cyberscoop.com\/intelbroker-cybercriminal-kai-west-arrested\/\"> Notorious cybercriminal \u2018IntelBroker\u2019 arrested in France, awaits extradition to US <\/a> <\/h3>\n<p> Kai West, a 25-year-old British national, is accused of stealing data from more than 40 organizations during a two-year spree. <\/p>\n<div class=\"post-item__byline\"> <span class=\"post-item__author\"> <span>By <\/span> <a class=\"post-item__author-link\" href=\"https:\/\/cyberscoop.com\/author\/matt-kapko\/\"> Matt Kapko <\/a> <\/span> <\/div>\n<p> <\/header>\n<p> <\/article>\n<article class=\"post-item post-item--popular-stories-cards \">\n<figure class=\"post-item__thumbnail\"> <a class=\"post-item__thumbnail-link\" href=\"https:\/\/cyberscoop.com\/nefilim-ransomware-artem-stryzhak-extradited\/\" tabindex=\"-1\"> <img data-recalc-dims=\"1\" loading=\"lazy\" width=\"252\" height=\"168\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-3.jpg?resize=252%2C168&ssl=1\" class=\"attachment-ratio-16-9-sm size-ratio-16-9-sm wp-post-image\" alt decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-7.jpg 1920w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-7.jpg?resize=300,200 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-7.jpg?resize=768,512 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-7.jpg?resize=1024,683 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-7.jpg?resize=1536,1024 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-7.jpg?resize=600,400 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-7.jpg?resize=252,168 252w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-7.jpg?resize=506,337 506w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-7.jpg?resize=1013,675 1013w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-7.jpg?resize=1265,843 1265w\" sizes=\"auto, (max-width: 252px) 100vw, 252px\"> <\/a><figcaption class=\"screen-reader-text\"> The Department of Justice building in Washington, DC, on February 9, 2022. (Photo by STEFANI REYNOLDS\/AFP via Getty Images) <\/figcaption><\/figure>\n<header class=\"post-item__meta\">\n<h3 class=\"post-item__title\"> <a class=\"post-item__title-link\" href=\"https:\/\/cyberscoop.com\/nefilim-ransomware-artem-stryzhak-extradited\/\"> Ukrainian extradited to US for alleged Nefilim ransomware attack spree <\/a> <\/h3>\n<div class=\"post-item__byline\"> <span class=\"post-item__author\"> <span>By <\/span> <a class=\"post-item__author-link\" href=\"https:\/\/cyberscoop.com\/author\/matt-kapko\/\"> Matt Kapko <\/a> <\/span> <\/div>\n<p> <\/header>\n<p> <\/article>\n<article class=\"post-item post-item--popular-stories-cards \">\n<figure class=\"post-item__thumbnail\"> <a class=\"post-item__thumbnail-link\" href=\"https:\/\/cyberscoop.com\/connor-moucka-snowflake-hacker-extradition-us\/\" tabindex=\"-1\"> <img data-recalc-dims=\"1\" loading=\"lazy\" width=\"252\" height=\"168\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-4.jpg?resize=252%2C168&ssl=1\" class=\"attachment-ratio-16-9-sm size-ratio-16-9-sm wp-post-image\" alt decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-8.jpg 1920w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-8.jpg?resize=300,200 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-8.jpg?resize=768,512 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-8.jpg?resize=1024,683 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-8.jpg?resize=1536,1024 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-8.jpg?resize=600,400 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-8.jpg?resize=252,168 252w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-8.jpg?resize=506,337 506w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-8.jpg?resize=1013,675 1013w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/07\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others-8.jpg?resize=1265,843 1265w\" sizes=\"auto, (max-width: 252px) 100vw, 252px\"> <\/a><figcaption class=\"screen-reader-text\"> Traffic streaks past the Department of Justice (DOJ) headquarters building late in the evening on May 18, 2024 in Washington, DC. (Photo by J. David Ake\/Getty Images) <\/figcaption><\/figure>\n<header class=\"post-item__meta\">\n<h3 class=\"post-item__title\"> <a class=\"post-item__title-link\" href=\"https:\/\/cyberscoop.com\/connor-moucka-snowflake-hacker-extradition-us\/\"> Canadian citizen allegedly involved in Snowflake attacks consents to extradition to US <\/a> <\/h3>\n<div class=\"post-item__byline\"> <span class=\"post-item__author\"> <span>By <\/span> <a class=\"post-item__author-link\" href=\"https:\/\/cyberscoop.com\/author\/matt-kapko\/\"> Matt Kapko <\/a> <\/span> <\/div>\n<p> <\/header>\n<p> <\/article>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/div>\n<p>\n<\/div>\n<p> <\/p>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/cameron-wagenius-att-snowflake-guilty-plea\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Former Army soldier pleads guilty to widespread attack spree linked<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[4415,2687,2515,282,78,338,323,117,2518,1913,256,2152,4578],"tags":[4416,2688,2519,286,86,341,327,119,2522,1916,262,2156,4579],"class_list":["post-7802","post","type-post","status-publish","format-standard","hentry","category-arrest","category-att","category-computer-fraud","category-cybercrime","category-cybersecurity","category-department-of-justice-doj","category-extortion","category-government","category-identity-theft","category-justice-department","category-research","category-snowflake","category-wire-fraud","tag-arrest","tag-att","tag-computer-fraud","tag-cybercrime","tag-cybersecurity","tag-department-of-justice-doj","tag-extortion","tag-government","tag-identity-theft","tag-justice-department","tag-research","tag-snowflake","tag-wire-fraud"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/arrest\/\" rel=\"category tag\">Arrest<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/att\/\" rel=\"category tag\">AT&T<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/computer-fraud\/\" rel=\"category tag\">computer fraud<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybercrime\/\" rel=\"category tag\">cybercrime<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybersecurity\/\" rel=\"category tag\">Cybersecurity<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/department-of-justice-doj\/\" rel=\"category tag\">Department of Justice (DOJ)<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/extortion\/\" rel=\"category tag\">extortion<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/government\/\" rel=\"category tag\">Government<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/identity-theft\/\" rel=\"category tag\">identity theft<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/justice-department\/\" rel=\"category tag\">Justice Department<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/research\/\" rel=\"category tag\">Research<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/snowflake\/\" rel=\"category tag\">Snowflake<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/wire-fraud\/\" rel=\"category tag\">wire fraud<\/a>","tag_info":"wire fraud","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/7802","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=7802"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/7802\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=7802"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=7802"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=7802"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":7802,"date":"2025-07-15T17:35:53","date_gmt":"2025-07-15T22:35:53","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=85189"},"modified":"2025-07-15T17:35:53","modified_gmt":"2025-07-15T22:35:53","slug":"former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2025\/07\/15\/former-army-soldier-pleads-guilty-to-widespread-attack-spree-linked-to-att-snowflake-and-others\/","title":{"rendered":"Former Army soldier pleads guilty to widespread attack spree linked to AT&T, Snowflake and others"},"content":{"rendered":"