US Executives Plead Guilty in Global Tech Support Scam

Bleepingcomputer

US Executives Plead Guilty in Global Tech Support Scam

First seen 22 May 2026, 16:10 UTC • •61.5

Article Content

1 / 6

Browse articles

ThreatCluster •May 23, 2026 at 16:07 UTC

•Executives provided telecom services to known tech support scammers from 2017 to 2022.
•Victims were misled by fraudulent pop-ups claiming their devices were infected with malware.
•The duo faces sentencing on June 16, 2026, with potential penalties including prison time and fines.

Adam Young and Harrison Gevirtz, former executives of Cloud Attribution, pleaded guilty to facilitating a tech support fraud scheme that targeted vulnerable individuals worldwide. From 2017 to 2022, they provided telecom services to scammers who used deceptive pop-up ads claiming malware infections to extract money from victims. The fraud involved impersonating major tech companies like Microsoft and Apple, leading to significant financial losses for the elderly. Young and Gevirtz failed to report the fraudulent activities despite being aware of them and instead advised scammers on how to evade detection. They are scheduled for sentencing on June 16, 2026, facing a maximum penalty of three years in prison and fines. The FBI reported that Americans lost at least $2.1 billion to tech support fraud in 2025 alone.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 167d ago How this analysis works

Timeline

2017-01-01

Cloud Attribution began operations

Young and Gevirtz operated Cloud Attribution, providing services to customers engaged in fraud.

2022-04-30

Cloud Attribution ceased operations

The company stopped its operations, but the fraudulent activities continued until the executives' guilty plea.

Bleepingcomputer

2026-05-21

Executives plead guilty

Adam Young and Harrison Gevirtz admitted to aiding a tech support fraud scheme, facing sentencing soon.

2026-06-16

Sentencing scheduled

Young and Gevirtz are set to be sentenced for their roles in the fraud scheme, facing up to three years in prison.

Bleepingcomputer

More articles in this cluster (5)

Threat Graph

4 entities, 3 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Phishing
T1021 - Remote Services
T1566.002 - Spearphishing Link

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Relationships

Phishing related to CWE-200 - Exposure of Sensitive Information
Phishing related to T1021 - Remote Services
Phishing related to T1566.002 - Spearphishing Link

Continue Reading

Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…

Chinese Actor Compromises US Government Networks via PHP2Shell Exploit A suspected Chinese nation-state actor exploited vulnerabilities in Palo Alto Networks firewalls using a chained PHP2Shell exploit and a Linux kernel privilege escalation flaw. The attack, which began on October 23, targeted 25 servers across the US, Japan, Taiwan, and South Korea, with a focus on US…