Defense Contractor Employee Jailed for Selling 8 Zero-Days to Russian Broker

"Williams exploited his senior role at a U.S. defense contractor to enrich himself at the expense of the United States and his employer. The tools he compromised were intended to protect this Nation; instead, he auctioned them off to a Russian bidder."

"The tools could have been used against any manner of victim, civilian or military around the world, and engage in all manner of crime from cyber fraud, theft, and ransomware, to state directed spying and offensive cyber operations against military targets."

"Williams sold the trade secrets for up to $4 million in cryptocurrency. The exploit tools could have allowed Russia to access millions of digital devices."

Peter Williams, a 39-year-old Australian national employed at U.S. defense contractor L3Harris, pleaded guilty to stealing and selling eight zero-day exploits to Russian exploit broker Operation Zero between 2022 and 2025. He received approximately $4 million in cryptocurrency payments for the trade secrets. The exploits could have enabled access to millions of digital devices and facilitated cyber fraud, theft, ransomware, espionage, and military cyber operations. Williams was sentenced to over seven years in prison, three years supervised release, and ordered to forfeit illicit proceeds including properties, jewelry, and luxury watches purchased with cryptocurrency. Officials emphasized the exploits were designed to protect the nation and select allies, making their sale to Russia a significant national security breach.

Read at The Hacker News