Former Trenchant exec pleads guilty to selling cyber exploits to Russian broker

A former executive at the defense contractor L3 Harris on Wednesday pleaded guilty to selling spyware exploits to a Russian broker.

Peter Williams, who formerly led Trenchant, the L3Harris division dealing in spyware and zero days, sold the trade secrets to a Russian cyber-tools broker that “publicly advertises itself as a reseller of cyber exploits to various customers, including the Russian government,” according to a Department of Justice (DOJ) press release.

Williams pleaded to two counts of theft of trade secrets for peddling the information which officials said he stole over a three-year period from 2022 to 2025. The material sold was national security software that included at least eight “sensitive and protected cyber-exploit components” which were only supposed to be sold to the U.S. government and approved allies, DOJ said.

Each of the charges carries a maximum of 10 years in prison and fines. 

Williams was promised millions of dollars in cryptocurrency for selling the secrets, prosecutors said. Officials say he signed multiple contracts with the Russian broker for both the initial sales and “follow-on support.”

“These international cyber brokers are the next wave of international arms dealers and we continue to be vigilant about their activities,” U.S. Attorney Jeanine Ferris Pirro said in a prepared statement. 

Pirro said Williams’s offenses cost L3Harris $35 million in addition to providing foreign cyber actors who are not allies with the U.S. “sophisticated cyber exploits that were likely used against numerous unsuspecting victims.”

Get more insights with the

Recorded Future

Intelligence Cloud.

Learn more.

No previous article

No new articles

Suzanne Smalley

Suzanne Smalley

is a reporter covering privacy, disinformation and cybersecurity policy for The Record. She was previously a cybersecurity reporter at CyberScoop and Reuters. Earlier in her career Suzanne covered the Boston Police Department for the Boston Globe and two presidential campaign cycles for Newsweek. She lives in Washington with her husband and three children.

 

Total
0
Shares
Previous Post

Cloud Atlas hackers target Russian agriculture sector ahead of industry forum

Next Post

PhantomRaven Malware Found in 126 npm Packages Stealing GitHub Tokens From Devs

Related Posts

Russian Ransomware Gangs Weaponize Open-Source AdaptixC2 for Advanced Attacks

The open-source command-and-control (C2) framework known as AdaptixC2 is being used by a growing number of threat actors, some of whom are related to Russian ransomware gangs. AdaptixC2 is an emerging extensible post-exploitation and adversarial emulation framework designed for penetration testing. While the server component is written in Golang, the GUI Client is written in C++ QT for
Read More

Hackers Exploit Milesight Routers to Send Phishing SMS to European Users

Unknown threat actors are abusing Milesight industrial cellular routers to send SMS messages as part of a smishing campaign targeting users in European countries since at least February 2022. French cybersecurity company SEKOIA said the attackers are exploiting the cellular router's API to send malicious SMS messages containing phishing URLs, with the campaigns primarily targeting Sweden, Italy,
Read More

Critical Exploit Lets Hackers Bypass Authentication in WordPress Service Finder Theme

Threat actors are actively exploiting a critical security flaw impacting the Service Finder WordPress theme that makes it possible to gain unauthorized access to any account, including administrators, and take control of susceptible sites. The authentication bypass vulnerability, tracked as CVE-2025-5947 (CVSS score: 9.8), affects the Service Finder Bookings, a WordPress plugin bundled with the
Read More