Support Local Journalism. Join Riverfront Times Press Club.

Tuesday, September 22, 2020

Hackers Harassed Teen Daughter of Ransomware Target in St. Louis, Feds Say

Posted By on Tue, Sep 22, 2020 at 12:54 PM

click to enlarge A mugshot of Nathan Wyatt taken after his 2017 sentencing to fraud and extortion in London. - LONDON METRO POLICE
  • A mugshot of Nathan Wyatt taken after his 2017 sentencing to fraud and extortion in London.

A British hacker extradited to Missouri to face federal charges for conspiracy and extortion went to gross lengths to terrify the victims of a ransom scheme, including harassing the teen daughter a St. Louis-based company owner who refused to pay, federal prosecutors found.

According to the government's sentencing memo filed last week, Nathan Wyatt, a member of a hacking group called "The Dark Overlord," played a key role in managing the anonymous accounts that infiltrated the networks of several U.S. companies between 2016 and 2017, including health care providers in Missouri, Illinois and Georgia.

The ransom demands ranged from $75,000 to $300,000 in bitcoins, and while the group collectively "preyed on the sensitivity of personal medical and financial records," investigators contended that Wyatt's actions allowed the group to remain hidden while they attacked U.S. targets.

"Perhaps most disturbingly," the memo reported, "members of the conspiracy sent ominous text messages to the daughter of one of the victims."

Although the public legal filings in the case do not name the companies targeted by the hacker group, a spokesperson for the U.S. Attorney's Office said the texts were sent to the daughter of a St. Louis victim.

The government's sentencing memo includes portions of the text messages themselves, including one that began with boasting how the group had stolen patient information, "including yours."

The text to the teen continued, as quoted in the memo:
weve all had a look and we all think your hot. soon some really evil men will be looking at you..possibly thru your window. your father is also looking at multiple say good bye to the house.. all bcs daddy wouldnt pay a much smaller sum to make all this go away.
The text, which had been sent through a phone registered by Wyatt, concluded with an obscene reference to incest.

In a later text sent to the company's office, the threats became more overt: "We will get physical and we will get violent."

However, despite the various attempts, none of the ransom targets buckled to the pressure. In turn, prosecutors said the hacker group sold the stolen data "on online criminal forums" where that information was later bought and exploited, "creating a second wave of victims."

As for Wyatt, prosecutors alleged that he had successfully concealed the identities of his coconspirators, "allowing them to act with impunity" while avoiding capture by the law. Wyatt's direct conduct in the scheme — which included recording and uploading to YouTube a cringingly bad extortion-themed rap song — showed how the group "relished the mayhem they caused," prosecutors wrote.

On Monday, Wyatt, 39, pleaded guilty to a single count of conspiracy and was sentenced to five years in prison. In Britain, he'd served more than a year in prison after pleading guilty in 2017 to multiple charges of identity theft, extortion and credit card fraud. He'd also made news in 2016 when he was arrested (but not charged) by police in Britain investigating the hacking of the iCloud account belonging to the sister of the Duchess of Cambridge, Kate Middleton. He was extradited to St. Louis in 2019.

During the sentencing hearing, conducted over Zoom, Wyatt apologized and said his decisions were influenced by mental problems, Cyber Scoop reported.

"I’m out of that world," Wyatt added, reportedly through tears. "I don’t want to see another computer for the rest of my life.”

Follow Danny Wicentowski on Twitter at
@D_Towski. E-mail the author at [email protected]
  • Sign up for our weekly newsletters to get the latest on the news, things to do and places to eat delivered right to your inbox.
  • Follow us on Facebook, Twitter and Instagram.

Tags: , , , , , , , , ,

Support Local Journalism.
Join the Riverfront Times Press Club

Local journalism is information. Information is power. And we believe everyone deserves access to accurate independent coverage of their community and state. Our readers helped us continue this coverage in 2020, and we are so grateful for the support.

Help us keep this coverage going in 2021. Whether it's a one-time acknowledgement of this article or an ongoing membership pledge, your support goes to local-based reporting from our small but mighty team.

Join the Riverfront Times Club for as little as $5 a month.

Read the Digital Print Issue

January 26, 2022

View more issues


Never miss a beat

Sign Up Now

Subscribe now to get the latest news delivered right to your inbox.

Best Things to Do In St. Louis

© 2022 Riverfront Times

Website powered by Foundation