The unsettling disappearance of “Today” show co-host Savannah Guthrie’s mother has shed new light on the evolving tactics of cybercriminals. Traditional cybercrime methods are being set aside as some hackers now opt for physical threats, employing firearms and kidnappers instead of keyboards, according to one expert.

Lisa J. Miller, a former detective and law enforcement executive from the Colorado Attorney General’s Office, highlighted this alarming trend known as “wrench attacks.” In these cases, criminals resort to kidnapping individuals or their family members to extort money.

The phrase “wrench attack” traces its origins to a 2009 web comic where a hacker joked about using a $5 wrench to coerce someone into revealing their password, suggesting it was easier than cracking the code through digital means.

GOT A STORY? TELL US HERE

Details surrounding Nancy Guthrie’s disappearance on February 1, 2026, in Tucson, Arizona, include footage of an armed suspect interfering with her doorbell camera. Nancy Guthrie, aged 84, is the mother of Savannah Guthrie, renowned host of the “Today” show. (Photo credits: Provided by FBI; Courtesy of NBC)

“In the beginning of this Nancy Guthrie case, we’re all taking a look at it, and we’re seeing things that just didn’t seem to fit,” Miller told Fox News Digital. “What we’re seeing with Nancy Guthrie is not a typical wrench attack.”

In traditional wrench attacks, sophisticated criminals behind computers identify potential targets, then recruit local muscle to carry out the violence, she said. The “masterminds” plan out the logistics — and pay thugs a cut to do the dirty work, which in some European cases has included torturing victims until they give up their passwords, accounts or other targeted information, she said.

NANCY GUTHRIE WAS ALIVE WHEN ABDUCTED, BLOOD EVIDENCE SHOWS ‘LAST STAND’ ON FRONT PORCH: RETIRED FBI AGENT

Pima County deputies examine a flyer taped to the mailbox outside Nancy Guthrie’s home in Tucson, Ariz., on Feb. 23, 2026. Guthrie, the 84-year-old mother of “Today” co-host Savannah Guthrie, is believed to have been abducted from her home in the early hours of Feb. 1. (Michael Ruiz/Fox News Digital)

In Guthrie’s case, Miller said it’s less likely that all of those tactics were employed because the person whose money they were likely seeking was her daughter, “Today” co-host Savannah Guthrie.

“The street level thug theory fits with what we’re seeing in the Guthrie case, because when the FBI released the pictures of this porch guy, and I’ve referred to him from the beginning as ‘porch monster,’ I mean, the guy comes across as a bit of a doofus,” Miller said. “Look at his getup, look at how he carries his firearm… yet there’s some very sophisticated elements to this case that again falls in line with what we see in a traditional wrench attack.”

MULTIPLE SUSPECTS ARE POSSIBLE IN NANCY GUTHRIE’S ABDUCTION

A well-wisher signs a banner with a photo of Nancy Guthrie and the words “Bring her home” outside the KVOA newsroom in Tucson, Ariz., on Feb. 12, 2026. Nancy Guthrie, the 84-year-old mother of journalist Savannah Guthrie, is missing from her Tucson home. (Rebecca Noble/Reuters)

For one, it’s been more than 100 days since purported ransom notes were sent to TMZ and local media, Miller noted, and no one has been arrested in connection with those.

The Pima County Sheriff’s Department, which is leading the investigation into Guthrie’s suspected kidnapping, did not immediately respond to a request for comment.

SIGN UP TO GET TRUE CRIME NEWSLETTER

An armed individual appears to tamper with a Google Nest camera at Nancy Guthrie’s front door in Tucson, Ariz., on Feb. 1, 2026, the morning of her disappearance. (FBI)

News outlets’ tip boxes are designed to help journalists get information from people like crime witnesses and whistleblowers without putting their identities at risk — which makes them useful tools for criminals, too, Miller said.

At least some of the early demands could have potentially been legitimate, Miller said. For one, Savannah Guthrie said as much in an interview with her “Today” colleague Hoda Kotb in March.

SAVANNAH GUTHRIE BELIEVES TWO RANSOM NOTES HER FAMILY RESPONDED TO WERE GENUINE

“I don’t think for a minute, and I’ve said before from the early stages, that the FBI would have put Savannah Guthrie [and] her family through the trauma of recording those videos if they did not believe that there was something real behind these videos,” Miller said.

At least one man, 42-year-old Derrick Callella of California, is accused of making a hoax ransom demand to capitalize on the crime without being involved in Guthrie’s disappearance. He sent the demand using less sophisticated attempts to cover his tracks and was identified and arrested within days.

LIKE WHAT YOU’RE READING? FIND MORE ON THE TRUE CRIME HUB

Derrick Callella allegedly tried to extort bitcoin from the Guthrie family after Nancy Guthrie’s disappearance. (Nathan Congleton/NBC/Getty Images, Obtained by Fox News)

The typical mastermind in a wrench attack is operating from overseas, likely in a country without an extradition treaty or where the government would be hostile to cooperating with the FBI, Miller said.

“They know where to go,” she told Fox News Digital. “They know how to hide their digital tracks, and they know where to operate from.”

FOLLOW THE FOX TRUE CRIME TEAM ON X

Aerial drone shots show the home and grounds of Nancy Guthrie in Tucson, Ariz., on Tuesday, Feb. 3, 2026. Nancy Guthrie, mother of ‘Today’ show host Savannah Guthrie, is suspected of being abducted from her home earlier this week. (Fox Flight Team)

In some cases where they’ve been arrested, masterminds have been linked to more than one abduction, she said. They’re typically young and computer savvy.

“Their working knowledge of computers and digital forensics is off the charts,” she said.

Nest doorbell camera video shows a masked man wearing gloves on her front steps around the time of her abduction, as well as three weeks earlier, creeping up to the home again. Her back door was also propped open by the time police arrived hours later, prompting questions about whether more than one person was involved.

There is a combined reward of more than $1.2 million for cracking the case. The family is asking anyone with information to dial 1-800-CALL-FBI. Tipsters can remain anonymous by contacting the local Crime Stoppers affiliate, 88-Crime.

“Hopefully someone will see something, say something and allow the family to get Nancy Guthrie home,” Miller said.

Hilary Duff found herself at a loss for words when the majority of a studio audience revealed they were unfamiliar with her early crush, Jonathan Taylor Thomas.

While appearing on “The Jennifer Hudson Show” on Wednesday, the former Disney star asked a fan about her childhood crush, bringing up the iconic JTT. “Do you remember JTT?” she inquired, only to realize that her reference didn’t resonate with the younger audience.

“You’re too young,” Duff remarked, addressing the fan before turning to the entire audience. “Can anyone here raise their hand if they know who I’m referring to?”

To her astonishment, she observed, “It’s not even half.”

Attempting to enlighten the crowd, Duff continued, “He was on ‘Home Improvement,’” highlighting the popular 1990s sitcom that featured Tim Allen.

“He was also in ‘The Lion King.’ He was a kid. He was the voice of Simba, right?” she continued.

Thomas’ best-known role was Randy Taylor in “Home Improvement.”

The 44-year-old actor also portrayed Tom Sawyer in the 1995 film “Tom and Huck” and voiced Pinocchio in the 1996 film “The Adventures of Pinocchio.”

He later took on smaller roles on TV, with his last credit being as a recurring guest star on another Allen-led sitcom “Last Man Standing” from 2013 to 2015.

Thomas, however, slowly made his exit from Hollywood and studied history and philosophy at Harvard University.

He later graduated from Columbia University in 2010 and attended St. Andrews University in Scotland.

In 2013, the former ’90s heartthrob got candid about his decision to step away from the limelight, telling People, “I’d been going nonstop since I was 8 years old.”

“I wanted to go to school, to travel and have a bit of a break,” Thomas continued. “I never took the fame too seriously. It was a great period in my life, but it doesn’t define me.”

Thomas’ last public appearance was when he stepped out of a convenience store in Southern California in 2023.

Two years before that, he was photographed walking his dog.

The proprietor of a Minneapolis daycare, previously spotlighted in a notorious YouTube video that exposed fraudulent activities within Somali-run operations, has been accused of embezzling $4.6 million from government funds, according to prosecutors.

Fahima Mahamud, aged 50, has been apprehended as part of a broader crackdown by federal authorities, which has resulted in charges against 15 individuals throughout Minnesota. These defendants are accused of participating in fraudulent schemes that allegedly misappropriated $90 million in taxpayer money.

Colin McDonald, the U.S. Assistant Attorney for Fraud Enforcement, revealed that multiple Medicaid programs were exploited by fraudsters who treated Minnesota-administered initiatives as their own financial resources.

“The level of fraud in Minnesota is astonishing,” McDonald stated during a news conference.

The Trump administration intensified its efforts to combat fraud in Minnesota following a revealing video by independent journalist Nick Shirley. The exposé highlighted several Somali-operated daycare centers, including the notably misspelled Quality ‘Learing’ Center, prompting a closer examination of such facilities.

Prosecutors say Mahamud made fraudulent reimbursement claims to the federal government for food assistance in her role as the CEO of the Future Leaders Early Learning Center. 

Mahamud allegedly submitted over 13,000 claims between October 2022 and December 2025, resulting in $4,629,929 in taxpayer-funded reimbursements from the Child Care Assistance Program administered by the Minnesota Department of Human Services.

At times, Mahamud claimed that she was serving two meals a day to about 1,000 different children, seven days a week, according to the filing.

Fahima Mahamud, 50, was charged on Wednesday with conspiracy to defraud the United States after she allegedly stole $4.6 million in food assistance

Mahamud, who was the CEO of the Future Leaders Early Learning Center (pictured), claimed that she was serving two meals a day to about 1,000 different children, seven days a week

However, prosecutors say she knew those meal counts were ‘false and inflated,’ but submitted them anyway to keep the money for herself.

‘[Mahamud] diverted much of those taxpayer dollars for the purchase of real property, for the benefit of herself and to other companies,’ the court filing stated.   

Mahamud’s business, the Future Leaders Early Learning Center, was one of several daycares featured in Shirley’s viral fraud investigation.

In the video, Shirley visited Mahamud’s daycare in December and was greeted by an unidentified woman who told him that he could not fill out an application to enroll a child.

One month later, Mahamud closed the Future Leaders Early Learning Center in January, KARE 11 reported.

In February, she was charged with wire fraud in connection with the Feeding Our Future scandal, the $250 million Somali-linked fraud scheme that prompted Donald Trump’s federal crackdown on Minnesota.  

Prosecutors said Mahamud received $854,000 from the Federal Child Nutrition Program in the Feeding Our Future scheme between December 2020 and March 2023.

The Daily Mail contacted the US Attorney’s Office and Mahamud’s lawyer for comment. 

Nearly 80 people have been charged with running a scheme through the Feeding Our Future non-profit to steal approximately $250 million in taxpayer dollars meant to feed hungry children.

Instead, the money was used to fund lavish lifestyles. Dozens of people, many in Minnesota’s large Somali community, have been convicted for their roles in a series of overlapping food fraud cases. 

Last year, Trump said Somalis were ‘completely taking over’ Minnesota and accused the community of widespread fraud, which prompted the massive, unprecedented immigration enforcement operation. 

Mahamud’s business was one of several Somali-run daycares featured in Nick Shirley’s viral fraud investigation

Shirley visited Mahamud’s daycare in December and was greeted by an unidentified woman who told him that he could not fill out an application to enroll a child

The mastermind behind the Feeding Our Future scheme, Aimee Bock, 45, was sentenced to more than 41 years in prison on Thursday morning.

She was convicted last March of multiple counts involving conspiracy, wire fraud, and bribery for her role.

US District Judge Nancy Brasel made an example of Bock as she sentenced her to prison and admonished her in front of the packed Minneapolis courtroom.

‘This was a vortex of fraud and you were its epicenter,’ Brasel told Bock. ‘A sentence of less than 500 months would not do justice to the people of Minnesota, who in a very real sense were the victims of this fraud.’

Assistant US Attorney Rebecca Kline told the court that the government believed that ‘disabling Aimee Bock from ever meaningfully participating in society ever again [was] the only just outcome.’

Warning: Graphic Content Ahead: This piece contains police body camera footage from the scene following a school shooting.

A Virginia court has cleared Ebony Parker, a former assistant principal, of criminal charges related to allegations of neglecting warnings prior to a 6-year-old student shooting a teacher. The judge dismissed the charges after the defense successfully argued that the prosecution failed to establish a case.

“If Parker’s behavior is to be considered a crime, it is up to the legislature to define it as such,” stated Circuit Court Judge Rebecca Robinson on Thursday. “Consequently, I am granting the defense’s motion to dismiss all counts, including the eight charges of felony child abuse and endangerment.”

Overcome with emotion, Parker bowed her head at the defense table, appearing to weep.

TEACHER SHOT BY 6-YEAR-OLD TESTIFIES: DIDN’T REMOVE CHILD FROM CLASS AS DEFENSE EXPERTS SUPPORT OFFICIALS

Former Richneck Elementary School assistant principal Ebony Parker looks back in the courtroom during Abby Zwerner’s lawsuit in Newport News, Va., on Oct. 28, 2025. (Stephen M. Katz/The Virginian-Pilot via AP, Pool)

Parker was charged with eight counts of felony child neglect in the January 2023 shooting at Richneck Elementary School in Newport News.

The charges alleged Parker “did commit a willful act or omission in the care of such students, in a manner so gross, wanton and culpable as to show a reckless disregard for human life,” according to court documents.

SEND US A TIP HERE

Prior to the dismissal of all charges, Parker was potentially facing up to five years in prison on each count. Thursday’s dismissal ends the criminal proceedings against Parker in the case.

Abigail Zwerner, the teacher shot by a 6-year-old student in January 2023, was the first witness Tuesday, May 19 in the trial of Ebony Parker in Newport News, Virginia. (WAVY)

LISTEN TO THE NEW ‘CRIME & JUSTICE WITH DONNA ROTUNNO’ PODCAST

First-grade teacher Abigail Zwerner was injured in the shooting.

The trial began with opening statements Tuesday, and the prosecution called 16 witnesses in all. On Tuesday, Zwerner took the stand recounting the moment her 6-year-old student opened fire on her in January 2023.

LIKE WHAT YOU’RE READING? FIND MORE ON THE TRUE CRIME HUB

“I saw this student looking at me,” she testified. “I looked over, the gun was pointed right at me, and then I was shot.”

The bullet traveled through her left hand and into her chest, she said.

WATCH: Bodycam video shows teacher after she was shot by 6-year-old student

She told jurors the student had already displayed aggressive behavior earlier that week, including an incident in which he grabbed and smashed her cellphone during reading-group time.

Zwerner testified the child appeared “very defiant” before breaking the phone and had what she described as a “challenging face.”

Teacher Abby Zwerner was awarded $10 million in damages related to the January 2023 shooting at Richneck Elementary School in Newport News, Va. (Newport News Police Department/Associated Press)

In November 2025, Zwerner was awarded $10 million in a civil trial against Newport News Public Schools, accusing the school division and administrators of gross negligence and alleging they ignored multiple warnings and failed to prevent the shooting.

It also claimed the student had a documented history of concerning and violent behavior. 

Fox News Digital has reached out to Parker’s attorney, Curtis Rogers, and Prosecutor Josh Jenkins for comment.

<!–>

This year’s Atlantic hurricane season is projected to have below-average activity, as announced by the National Oceanic and Atmospheric Administration (NOAA).

The anticipated reduction in storm activity is attributed to the influence of El Niño, which is expected to develop soon and continue throughout the season, the agency revealed on Thursday.

The Atlantic hurricane season officially begins on June 1 and lasts until November 30.

NOAA estimates that there is a 55% probability that the season will see below-average activity, predicting between eight and 14 named storms, which include tropical storms and more severe systems.

The agency also forecasts that there could be three to six hurricanes, with one to three potentially escalating to major hurricanes at Category 3 strength or higher.

NOAA’s hurricane outlooks predict overall seasonal activity, though levels of activity can vary throughout the six-month season. It does not predict how many storms will make landfall or specific locations where landfalls might occur.

An average Atlantic hurricane season has 14 named storms, seven hurricanes and three major hurricanes, according to NOAA.

The 2025 Atlantic hurricane season brought 13 named storms, just below the long-term seasonal average

While there were no landfalling hurricanes in the United States last year for the first time in a decade, the season still proved to be consequential, producing three Category 5 hurricanes, including Melissa, which devastated Jamaica.

SEE ALSO: National Hurricane Center updates forecast products ahead of 2026 season