“A 22-year-old man from the United Kingdom arrested this week in Spain is allegedly the ringleader of Scattered Spider, a cybercrime group suspected of hacking into Twilio, LastPass, DoorDash, Mailchimp, and nearly 130 other organizations over the past two years.”
Tyler Buchanan of Dundee allegedly controlled $27 million in Bitcoin at one point. The crew’s tool was a text message about a schedule change and a fake login page that grabbed the one-time code in real time. Twilio fell first, and the group used it to hit at least 163 of Twilio’s customers. SMS codes protected none of them.