A former US Army soldier from Joint Base Lewis–McChord (JBLM) has pleaded guilty in Seattle to charges connected to a large-scale hacking and extortion operation targeting telecommunications companies.
21-year-old Cameron John Wagenius, who served at JBLM, admitted to unlawfully accessing and transferring confidential call records from multiple telecom providers.
Authorities assert Wagenius was recruited into a broader extortion ring responsible for breaching over 150 Snowflake cloud accounts in April 2024. The group demanded ransoms totaling millions, threatening data dumps if victims refused to pay.
Prosecutors say that between April 2023 and Dec. 18, 2024, Wagenius used Dark Web accounts associated with the nickname Kiberphant0m and conspired with others to defraud at least 10 victim organizations by obtaining login credentials for their protected computer networks.
They pilfered the credentials using a hacking tool called SSH Brute, among other means. They used Telegram group chats to discuss gaining access to victim companies’ networks and transfer stolen credentials.
“This activity happened while Wagenius was on active duty with the US Army,” according to the US Department of Justice.
Wagenius even bragged about accessing the call logs of US President Donald Trump and former Vice President Kamala Harris, reports say.
After stealing data, Wagenius and his co-conspirators extorted the victim organizations both privately and in public forums, the DOJ notes.
The extortion methods included threats to post or sell the stolen data on cybercrime forums – which they did several times. They also used stolen data to commit other frauds, including SIM-swapping.
“In total, Wagenius and his co-conspirators attempted to extort at least $1 million from victim data owners,” the DOJ says.
Court filings further reveal that, prior to his arrest, Wagenius searched the web for “can hacking be treason,” “defecting to Russia,” and “US military personnel defecting to Russia,” raising concerns about his intentions to flee the US.
Authorities also found fake IDs, thousands of stolen identity documents, and cryptocurrency wallets on his devices.
Wagenius pleaded guilty to two counts of unlawfully transferring confidential phone records. There is no plea agreement, and he faces a maximum prison sentence of 20 years and fines of up to $500,000.
You may also want to read:
US House of Reps Bans WhatsApp on Official Devices Over Security Concerns
Graphite Spyware Was Used to Infect iPhones of European Journalists, Researchers Confirm
Iranian Man Faces Decades in Prison after Ransomware Attacks on US Municipalities
Watch Out for ‘FBI Agents’ Offering to Recover Your Stolen Funds
tags
Filip has 15 years of experience in technology journalism. In recent years, he has turned his focus to cybersecurity in his role as Information Security Analyst at Bitdefender.
View all postsMay 23, 2025
May 16, 2025
April 03, 2025