March 29, 2025
Prison for activating ‘kill switch’ on former employer’s network
cybersecurity In Brief justice department sabotage Security

Prison for activating ‘kill switch’ on former employer’s network

 

Texas man faces prison for activating ‘ kill switch ’ on former employer’s network. Texas software developer Davis Lu is facing a potential 10-year prison sentence after being convicted by a federal jury for intentionally sabotaging his former employer’s network. The Justice Department announced that Lu, 55, was found guilty of “causing intentional damage” to the company’s systems following a corporate restructuring that diminished his role and restricted his access.

According to prosecutors, Lu reacted to his reduced responsibilities in 2018 by embedding a hidden “ kill switch ” within the company’s infrastructure. This code, named IsDLEnabledinAD, was designed to automatically lock out all employees from the company’s network if Lu’s credentials were ever deactivated. The name of the script itself referenced whether Lu’s account was enabled in Active Directory, a critical system for managing network permissions.

The scheme went unnoticed until September 9, 2019, when Lu left the company. As soon as his credentials were disabled, the kill switch triggered, causing a widespread network shutdown that affected thousands of employees across the globe. The disruption led to significant operational and financial losses, with the Justice Department estimating damages in the hundreds of thousands of dollars.

This case highlights the risks companies face when employees with high-level system access retaliate after workplace disputes. While businesses rely on IT professionals to maintain and protect their networks, incidents like this underscore the importance of stringent security measures, such as regularly auditing employee access, monitoring system changes, and implementing safeguards against insider threats.

Lu’s sentencing is scheduled for June 23, and he faces up to a decade behind bars for his actions. His case serves as a stark reminder of how a single disgruntled employee can wield significant power over a company’s operations—if proper precautions aren’t taken.

Source: Original Article

JNE Trading

JNE Trading, the home of trading news

Leave feedback about this