An NSA hacker has admitted taking home copies of classified software exploits – understood to be the cyber-weapons slurped from an agency worker’s home Windows PC by Kaspersky Labs’ antivirus.
Nghia Hoang Pho, 67, pleaded guilty in a US district court in Baltimore on Friday to one count of willful retention of national defense information. The Vietnam-born American citizen, who lives in Ellicott City, Maryland, faces roughly six to eight years in the clink, with sentencing set for April next year.
Pho is understood to be the Tailored Access Operations (TAO) programmer whose home computer was running Kaspersky Lab software that was allegedly used, one way or another, by Russian authorities to steal top-secret NSA documents and tools in 2015.
According to Kaspersky, its security package running on the PC detected Pho’s copies of the NSA exploits as new malicious software, and uploaded the powerful spyware to its cloud for further analysis by its researchers. The biz deleted its copy of the archive as soon as it realized what it had discovered, it is claimed. It is further alleged by US government sources that Russian spies were able to get their hands on the top-secret code via the antivirus package, although Kaspersky denies any direct involvement.
Judging from his plea deal with prosectors, Pho broke federal law when, as a developer on the NSA’s TAO hacking team, he took his work home with him multiple times and, in the process, exposed the classified information. Pho admitted that, over a five-year period starting in 2010, he copied information from NSA machines and took it all home with him.
“Beginning in 2010 and continuing through March 2015, Pho removed and retained U.S. government documents and writings that contained national defense information, including information classified as Top Secret and Sensitive Compartmented Information,” the US Department of Justice said in disclosing Friday’s guilty plea.
“This material was in both hard-copy and digital form, and was retained in Pho’s residence in Maryland.”
No other charges were filed, and there is no mention of any efforts by Pho to sell or pass off any of the data.
Kaspersky Lab has denied any wrongdoing in the matter or illicit ties to Russian intelligence. The security vendor also pointed out Pho’s machine was infected with loads of malware, meaning any miscreant could have stolen Uncle Sam’s cyber-weapons.

信任建立在互相了解和尊重的基础上,所以要遵守当地的法律法规,要了解当地的游戏规则和适应当地的文化。国内的安全业者要走向全球,首先要在企业内建立全球标准的遵循文化。
Regardless, the Moscow-based biz is fighting a ban on the use of its products on American government networks. Meanwhile, British spies at surveillance nerve center GCHQ today warned Brits to be wary of cloud-based antivirus toolkits. Kaspersky isn’t named specifically, but reading between the lines, Blighty’s snoops are saying: don’t Pho-k it up like the NSA did. ®
网络安全法宣传片 002 国家网络安全的现状与重要性概述
我们使用最先进的安全评估工具发现组织内各种系统的漏洞,并及时修补。别忘了内部员工们薄弱的信息安全意识才是组织最大的弱点。

猜您喜欢

黄岛法院举办“全区行政诉讼与行政复议培训班”
企业安全宣传小短片
CyberSecurity Law Introduction 网络安全法宣传视频系列
日本佐渡市第6次漂来“幽灵船” 2具男尸仰面朝天
RUBI QUEENSNAKE
全民网络安全意识教育策略与资源