Mom of Soldier in Trump Extortion Case 'Shocked'

A 20-year-old U.S. Army soldier finds himself at the center of a cybercrime storm after being accused of stealing and trying to sell confidential phone logs belonging to President-elect Donald Trump and Vice President Kamala Harris. Federal prosecutors charged Cameron John Wagenius with unlawfully transferring sensitive information - a move that shines a spotlight on a broader, high-stakes hacking saga.

Meet ‘Kiberphant0m’: The Hacker Behind the Mask

Authorities believe Wagenius operated under the alias “Kiberphant0m,” a name that strikes fear in the world of cybersecurity and that has claimed responsibility for breaching at least 15 telecommunications companies, including AT&T^® and Verizon^®.

On Nov. 6, 2024, the hacker allegedly boasted on BreachForums about obtaining Trump’s and Harris’ call logs, according to The Register. The post demanded AT&T contact either Kiberphant0m or an associate nicknamed “Reddinton,” threatening to leak the data if the demands weren’t met. The post ended cryptically with the hashtag “#FREEWAIFU.”

A Digital Domino Effect: The Snowflake Connection

Wagenius’ alleged hacking activities appear to be part of a larger campaign known as the “Snowflake hacks” - a series of coordinated cyberattacks targeting the cloud storage environments of more than 165 organizations. Hackers exploited vulnerabilities in single-factor authentication systems, gaining unauthorized access to sensitive data stored on the Snowflake platform. These breaches impacted major companies, including AT&T, Santander Bank^®, and Ticketmaster^®, exposing billions of customer records.

Wagenius isn’t the first arrest tied to these attacks. Two other suspects, Connor Riley Moucka and John Erin Binns, face charges for infiltrating digital environments, stealing data, and demanding ransom payments. Federal prosecutors allege that all three have ties to “Scattered Spider,” as reported by The Register, a notorious hacking group also linked to the 2023 Las Vegas casino cyberattacks.

Family Shocked by the Accusations

Wagenius’ family expressed disbelief over the allegations. “I never was aware he was into hacking,” said his mother, Alicia Roen, as reported by The Register. “It was definitely a shock to me when we found this stuff out.” She described Wagenius’ Army work as focused on radio signals and network communications, adding another layer of surprise to his alleged double life as a cybercriminal.

Cybersecurity Experts Strike Back

Investigative journalist Brian Krebs, who reported extensively on the case, revealed the challenges of exposing cybercriminals like Kiberphant0m. Allison Nixon, one of the experts who unmasked Wagenius and chief research officer at Unit 221B, faced threats and harassment during the investigation. “Anonymously extorting the President and VP as a member of the military is a bad idea,” Nixon said, as reported by Forbes. “But it’s an even worse idea to harass people who specialize in de-anonymizing cybercriminals.”

The Long Arm of the Law

Wagenius’ legal troubles began when federal prosecutors indicted him on charges of selling confidential phone records. Court documents revealed he “knowingly and intentionally” transferred these records without authorization and knew they had been obtained fraudulently, as reported by The Register. He appeared in a Texas courtroom on Dec. 20, 2024, where prosecutors requested his extradition to Washington state.

The charges could carry significant penalties, adding to the weight of his alleged involvement in one of the largest hacking conspiracies of recent years. Moucka and Binns, his alleged co-conspirators, already face 20 counts of conspiracy, computer fraud, and aggravated identity theft.

Lessons in Cybercrime

This case serves as a stark reminder of the risks posed by insiders with access to sensitive information. Wagenius’ alleged actions expose vulnerabilities not only in telecommunications security but also within the military ranks. With billions of records compromised in the Snowflake hacks, the fallout continues to ripple across industries, from banking to entertainment.

The stakes of this saga go far beyond stolen call logs. It’s a cautionary tale of how the digital age reshapes the frontlines of crime - and why no one, not even someone in uniform, is immune from the consequences.

References: US Army soldier who allegedly stole Trump’s AT&T call logs arrested | Trump Phone Hacker: 20-Year-Old U.S. Army Soldier Arrested