An elite member of NSA's hacking team had his home computer hacked through his use of Kaspersky anti-virus which may send him to prison for a decade
A member of the US National Security Agency’s elite hacking team has been charged with illegally removing top secret materials, in an embarrassing breach for the crucial electronic espionage body.
The Justice Department said Friday that Nghia Hoang Pho, 67, a 10-year veteran of the NSA’s Tailored Access Operations unit, which broke into computer systems, agreed to plead guilty to a single charge of removing and retaining top-secret documents from the agency.
He kept the material at his Ellicott City, Maryland home.
According to The New York Times, it was Vietnam-born Pho’s computer that apparent Russian hackers accessed via his use of Kaspersky software to steal files and programs the NSA developed for its own hacking operations.
The Justice Department said Pho had taken printed and digital copies of documents and writings labelled “secret,” and containing sensitive “national defence information,” and stored them in his home from 2010 until he was caught in 2015.
It gave no detail on why he did that, and did not say whether Pho had revealed or lost any of the information.
Pho faces up to 10 years in prison, though he could negotiate a lighter punishment.
He was the third NSA employee charged in the past two years for taking home top-secret information.
The NSA declined to respond to questions on the case.
In October, the Wall Street Journal reported that Russian hackers exploited anti-virus software made by Kaspersky Lab to steal top secret materials from an unnamed NSA employee.
The WSJ said the 2015 hack led to the Russians obtaining information on how the NSA itself penetrates foreign computer networks and protects itself from cyber attacks.
The incident was a key reason why the US government earlier this year announced a ban on use of Kaspersky anti-virus software on government computers, warning that the Moscow-based company has suspect links to Russian intelligence.
Kaspersky denies any ties to the Russian government, but said its own forensic investigation did show that hackers made use of its software to break into the NSA worker’s home computer.
Kaspersky said the stolen material included essential source code for the Equation Group hacking software from the NSA.