Cameron Wagenius

☆ pin

Also known as Kiberphant0m, cyb3rph4nt0m

Reports

First seen

Aug 5, 2026

Last seen

Sep 25, 2026

Motivation

Financial

Targeting

Victim regions

×3

United States×3

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Top ATT&CK techniques

T1078 Valid Accounts ×3T1005 Data from Local System ×3T1567 Exfiltration Over Web Service ×2T1110 Brute Force ×2T1491 Defacement ×1T1041 Exfiltration Over C2 Channel ×1T1090 Proxy ×1T1190 Exploit Public-Facing Application ×1

Recent reports

Critical

Army soldier sentenced to 70 months for cybercrime spree targeting AT&T, Snowflake, and major companies

CyberScoopSep 25, 2026 Critical

Canadian Man Pleads Guilty in Snowflake Extortions

KrebsOnSecurityAug 6, 2026 Critical

Snowflake hacker Connor Moucka pleads guilty to massive extortion campaign

CyberScoopAug 5, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.