Dev gets 4 years for creating kill switch on ex-employer’s systems

What’s new: A software developer, Davis Lu, has been sentenced to four years in prison for creating malware and a kill switch that sabotaged his former employer’s Windows network after his termination. The malicious code caused significant disruptions, locking thousands of users out of their accounts and leading to substantial financial losses for the company.

Who’s affected

The incident primarily affected the employees of the Ohio-based company, reportedly Eaton Corporation, as well as the organization’s operational integrity and financial standing.

What to do

• Review access controls and account management policies to prevent unauthorized access and potential sabotage by former employees.
• Implement monitoring solutions to detect unusual activities or changes in user accounts, especially following terminations.
• Conduct regular security training for employees to recognize and report suspicious behavior.

Sources

• BleepingComputer