US Executives Plead Guilty in Global Tech Support Scam

Bleepingcomputer

US Executives Plead Guilty in Global Tech Support Scam

First seen 22 May 2026, 16:10 UTC • •61.5

Article Content

1 / 6

Browse articles

ThreatCluster •May 23, 2026 at 16:07 UTC

•Executives provided telecom services to known tech support scammers from 2017 to 2022.
•Victims were misled by fraudulent pop-ups claiming their devices were infected with malware.
•The duo faces sentencing on June 16, 2026, with potential penalties including prison time and fines.

Adam Young and Harrison Gevirtz, former executives of Cloud Attribution, pleaded guilty to facilitating a tech support fraud scheme that targeted vulnerable individuals worldwide. From 2017 to 2022, they provided telecom services to scammers who used deceptive pop-up ads claiming malware infections to extract money from victims. The fraud involved impersonating major tech companies like Microsoft and Apple, leading to significant financial losses for the elderly. Young and Gevirtz failed to report the fraudulent activities despite being aware of them and instead advised scammers on how to evade detection. They are scheduled for sentencing on June 16, 2026, facing a maximum penalty of three years in prison and fines. The FBI reported that Americans lost at least $2.1 billion to tech support fraud in 2025 alone.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 120d ago How this analysis works

Timeline

2017-01-01

Cloud Attribution began operations

Young and Gevirtz operated Cloud Attribution, providing services to customers engaged in fraud.

2022-04-30

Cloud Attribution ceased operations

The company stopped its operations, but the fraudulent activities continued until the executives' guilty plea.

Bleepingcomputer

2026-05-21

Executives plead guilty

Adam Young and Harrison Gevirtz admitted to aiding a tech support fraud scheme, facing sentencing soon.

2026-06-16

Sentencing scheduled

Young and Gevirtz are set to be sentenced for their roles in the fraud scheme, facing up to three years in prison.

Bleepingcomputer

More articles in this cluster (5)

Threat Graph

4 entities, 3 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Phishing
T1021 - Remote Services
T1566.002 - Spearphishing Link

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Relationships

Phishing related to CWE-200 - Exposure of Sensitive Information
Phishing related to T1021 - Remote Services
Phishing related to T1566.002 - Spearphishing Link

Continue Reading

Critical Zero-Day Vulnerability in Cisco Secure Email Gateway Exploited On September 14, 2026, Cisco disclosed a critical SQL injection vulnerability (CVE-2026-76461) in its Secure Email Gateway, allowing unauthenticated remote attackers to execute arbitrary commands with root privileges. This vulnerability arises from insufficient validation in the email parsing logic. Cisco confirmed…

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…