30 years for hacking an employer: former Motorola technician pleads guilty to fraud

Brother

Professional
Messages
2,590
Reaction score
539
Points
113
The convict tried to be anonymous, but a series of mistakes gave him away.

A former Motorola technician in the United States has admitted that he tried to fraudulently obtain a passport while awaiting trial for a cyberattack on his former employer. Andrew Man, 28, from Derry, United States, pleaded guilty to charges of passport fraud and electronic communications fraud. Earlier, he was charged with a cyberattack on his former employer, Motorola. The verdict is due in March 2024.

Man was charged in February with passport fraud, and in 2021 with breaking into Motorola's computer network and stealing data. Court documents refer to his former employer as "Company A," describing it as an international corporation headquartered in Chicago that specializes in selling, among other things, radio equipment.

According to prosecutors, Man worked as a radio technician for Motorola before joining the Massachusetts Port Authority (Massport). During his time at Massport between August and September 2020, he sent phishing emails to 31 Motorola employees. The emails contained a malicious link to a fake Motorola payroll portal, through which Man was able to steal victims ' corporate login credentials.

After receiving the employees usernames and passwords, Man sent them text messages that mimicked Okta's security messages. This allowed him to get multi-factor authentication codes. Using the data obtained, Man broke into Motorola's IT network, hacked the corporation's Bitbucket repository, and stole the source code that allowed him to unlock the functions of radio equipment worth up to $175 per radio.

Although Man tried to hide his actions by using anonymous Amazon Web Services IP addresses, the investigation was able to trace his actions to Comcast's IP address and Massport's work email address. He also used his personal Google account and driver's license to create a Coinbase account, through which he paid for hosting a fake Motorola login page.

In October 2021, Man was charged with several crimes related to hacking Motorola. In November 2022, Man tried to get a fake passport in a different name, attaching his photo and false documents to the application. He also appealed to the US Senator to speed up the processing of his passport application, claiming that he urgently needed to leave for Germany for family reasons.

Now Man is awaiting sentencing. For fraud involving electronic communications, he faces up to 20 years in prison with an additional 3 years of supervision after his release, a fine of up to $250,000,and damages. Passport fraud can result in a 10-year prison sentence and a $250,000 fine.
 
Top