US soldier gets 70 months in prison for extorting 10 tech, telecom firms
US soldier sentenced to 70 months for hacking and extorting tech firms.
A former U.S. Army soldier, Cameron John Wagenius, has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technology and telecommunications companies. He used a self-developed SSH Brute tool and Telegram to steal credentials, extort companies, and sell stolen data, attempting to extort over $1 million. Wagenius was also ordered to pay over $294,000 in restitution.
AI summary of the linked source. Not reviewed by an editor. How this works
The lesson from this incident
Full lessonA former U.S. Army soldier exploited weak SSH authentication across at least 10 technology and telecom companies, using a self-developed brute-force tool to steal credentials and exfiltrate sensitive data. The root cause was inadequate access control — organizations failed to enforce strong authentication mechanisms, rate limiting, and account lockout policies on externally accessible SSH services. Once inside, the attacker operated undetected long enough to stage an extortion campaign exceeding $1 million in demands, indicating insufficient monitoring and alerting capabilities. This case highlights how a single, well-known attack vector (credential brute-forcing) can cascade into significant financial and reputational damage when basic security hygiene is neglected.
What helps against this
How we list vendors- Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — SSH Brute
- domain — XSS.is