The U.S. Department of Justice (DOJ) has filed charges against five individuals for stealing approximately $6.3 million in cryptocurrency and compromising sensitive corporate data.
Cryptocurrency Case
The accused include 23-year-old Ahmed Hossam Eldin Elbadawy from Texas, 20-year-old Noah Michael Urban from Florida, 20-year-old Evans Onyeaka Osiebo from Texas, 25-year-old Joel Martin Evans from North Carolina, and 22-year-old Tyler Robert Buchanan, a UK citizen captured in Spain.
All five defendants face charges of conspiracy to commit phone fraud, aggravated identity theft, and related offenses. Notably, Tyler Robert Buchanan faces more serious consequences, with potential phone fraud charges leading to a 20-year prison sentence.
Details of the Attack
According to prosecutors, the group used phishing messages to steal employee credentials, targeting workers at major tech companies, telecommunications firms, and cryptocurrency platforms. Between September 2021 and April 2023, they attacked at least 45 companies across the U.S., Canada, the UK, and other countries, aiming to bypass two-factor authentication by mimicking legitimate portals like Okta.
Companies and individuals should implement strong password policies and utilize two-factor authentication to protect their credentials. Additionally, it is crucial to remain vigilant against phishing attacks and report suspicious activities immediately.
