Loading story…
Former CEO Adam Young and former CSO Harrison Gevirtz of a U.S.-based call routing and analytics company pleaded guilty in federal court to charges tied to a long-running tech-support fraud scheme that targeted thousands of Americans. Prosecutors said the pair knowingly provided telecommunications infrastructure—including phone numbers, call routing, tracking, and forwarding services—to India-based scam call centers from about 2016 to 2022, while failing to report the crimes and, in some cases, helping customers avoid complaints, detection, and account termination.
Authorities said the fraud relied on fake malware and virus pop-up warnings that tricked victims into calling bogus support lines, where they were pressured into paying for unnecessary services and sometimes exposed to remote access that enabled theft of personal and financial data. The FBI investigation, which began in 2020, also linked the operation to multiple convictions of Indian nationals and a former employee, and found that Young and Gevirtz operated a Tunisia-based call center where some employees engaged in similar tech-support fraud; both men are scheduled to be sentenced on June 16, 2026.
See the reporting duties and controls this puts on the clock.
4 events from the most recent confirmed update back to the earliest known activity.
Federal authorities scheduled sentencing for Adam Young and Harrison Gevirtz for 2026-06-16 following their guilty pleas. The hearing is expected to determine penalties for their role in supporting the fraud scheme.
On 2026-05-20, former CEO Adam Young and former CSO Harrison Gevirtz pleaded guilty to misprision of a felony for knowingly supporting widespread tech-support fraud and telemarketing scams. The Justice Department said the scheme defrauded thousands of Americans and included deceptive pop-up warnings, bogus support services, and theft of personal and financial information in some cases.
In 2020, the FBI began investigating the tech-support fraud operation tied to India-based call centers and the U.S.-based telecommunications support company. The investigation later linked the scheme to multiple fraud convictions and a former employee of the company.
From roughly 2016 to 2022, Adam Young and Harrison Gevirtz's telecommunications services business provided phone numbers, call routing, tracking, and forwarding to India-based tech-support scam operators. Prosecutors said they knew the customers were committing fraud and at times helped them avoid complaints and account termination.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
5 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcecybersecuritynews.com
Open sourcetherecord.media
Open sourcejustice.gov
Open sourcedexerto.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
U.S. authorities secured guilty pleas in two separate cyber-enabled criminal cases: a Ghana-based fraud ring that stole more than **$100 million** via **business email compromise (BEC)** and romance scams, and a **Phobos** ransomware administrator tied to a global extortion operation. The cases highlight parallel monetization paths—social engineering and payment redirection in BEC/romance schemes versus data encryption and extortion in ransomware-as-a-service (RaaS)—and both involve international arrests/extraditions to the United States. In the fraud case, **Derrick Van Yeboah** (40) pleaded guilty to conspiracy to commit wire fraud and agreed to pay **over $10 million** in restitution for his role in a Ghana-based operation that targeted U.S. victims from 2016 to May 2023, using spoofed emails to impersonate customers/employees and laundering proceeds through U.S. intermediaries before sending funds to coordinators in West Africa. Separately, **Evgenii Ptitsyn** (43) pleaded guilty to wire fraud conspiracy for helping develop, sell, distribute, and operate the **Phobos** ransomware platform, which the U.S. DoJ says hit **1,000+** entities and extorted **$16+ million**; he was arrested in South Korea in 2024, extradited to the U.S., and faces up to **20 years** in prison, with sentencing scheduled for July 15.
Jun 29, 2026
Former U.S. Air Force members Chijioke Timothy Odimegwu and Harafat Mogaji were sentenced in federal court for a multiyear business email compromise scheme conducted while they were stationed at Dover Air Force Base, Delaware. The pair used phishing to obtain employee credentials, spoofed business-partner email addresses, and hijacked legitimate email threads to impersonate vendors and redirect corporate payments into accounts controlled by accomplices in the United States and abroad. Prosecutors said the conspiracy targeted at least 15 organizations over more than two years, successfully diverting more than $1.68 million from an Iowa City victim and more than $720,000 from an Ohio victim, while attempting additional fraudulent wire transfers nationwide. After pleading guilty in June to wire fraud, identity theft, and access-device-fraud offenses, Odimegwu received 111 months in prison and Mogaji received 78 months; both were ordered to pay restitution and will serve three years of supervised release after incarceration.
Sep 30, 2026
Two cybersecurity professionals, Ryan Goldberg and Kevin Martin, have pleaded guilty to conspiracy charges after using their positions as a ransomware negotiator and incident response manager to conduct ransomware attacks with the ALPHV/BlackCat group. The pair, along with an unnamed co-conspirator, leveraged their infosec expertise to compromise five organizations—including a medical device company, a pharmaceutical firm, a doctor's office, an engineering company, and a drone manufacturer—between May and December 2023. They agreed to pay ALPHV administrators 20% of any ransom collected in exchange for access to the ransomware platform. The only successful extortion resulted in a $1.2 million bitcoin payment from the medical device company, which was split among the perpetrators, with a portion sent to ALPHV. Patient photos stolen from the doctor's office were published on the gang’s leak site. Goldberg and Martin face up to 20 years in prison, with sentencing scheduled for March. Authorities highlighted the betrayal of trust, as both men used their cybersecurity training and privileged access to facilitate the very crimes they were supposed to prevent.
Jun 29, 2026