Month: March 2025

Source: United States Department of Justice Criminal Division

A federal jury in Cleveland convicted a Texas man today for writing and deploying malicious code on his former employer’s network.

According to court documents and evidence presented at trial, Davis Lu, 55, of Houston, was employed as a software developer for the victim company headquartered in Beachwood, Ohio, from November 2007 to October 2019. Following a 2018 corporate realignment that reduced his responsibilities and system access, Lu began sabotaging his employer’s systems. By Aug. 4, 2019, he introduced malicious code that caused system crashes and prevented user logins. Specifically, he created “infinite loops” (in this case, code designed to exhaust Java threads by repeatedly creating new threads without proper termination and resulting in server crashes or hangs), deleted coworker profile files, and implemented a “kill switch” that would lock out all users if his credentials in the company’s active directory were disabled. The “kill switch” code — which Lu named “IsDLEnabledinAD”, abbreviating “Is Davis Lu enabled in Active Directory” — was automatically activated upon his termination on Sept. 9, 2019, and impacted thousands of company users globally. Lu named other code “Hakai,” a Japanese word meaning “destruction,” and “HunShui,” a Chinese word meaning “sleep” or “lethargy.” Additionally, on the day he was directed to turn in his company laptop, Lu deleted encrypted data. His internet search history revealed he had researched methods to escalate privileges, hide processes, and rapidly delete files, indicating an intent to obstruct efforts of his co-workers to resolve the system disruptions. Lu’s employer suffered hundreds of thousands of dollars in losses as a result of Lu’s actions.

The jury convicted Lu of causing intentional damage to protected computers, for which he faces a maximum penalty of 10 years in prison. A sentencing date has not been set. A federal district court judge will determine any sentence after considering the U.S. Sentencing Guidelines and other statutory factors.

Supervisory Official Matthew R. Galeotti of the Justice Department’s Criminal Division, Acting U.S. Attorney Carol M. Skutnik for the Northern District of Ohio, and Special Agent in Charge Gregory D. Nelsen of the FBI Cleveland Field Office made the announcement.

The FBI Cleveland Field Office investigated the case.

Senior Counsel Candina S. Heath of the Criminal Division’s Computer Crime and Intellectual Property Section and Assistant U.S. Attorneys Daniel J. Riedl and Brian S. Deckert for the Northern District of Ohio are prosecuting the case.

Source: United States Department of Justice Criminal Division

View the complaint affidavit.

Michael Charles Schena, 42, of Alexandria, Virginia, was arrested on criminal charges related to his alleged participation in a criminal conspiracy to gather, transmit, or lose national defense information.

According to court documents, Schena is employed by the U.S. Department of State (DOS) working out of DOS Headquarters in Washington, D.C. Schena held a top secret security clearance and had access to information up to the secret level within his DOS workspace. Beginning in or about April 2022, Schena allegedly communicated with people he met online through various communication platforms and provided them with information they were not authorized to receive. In return, Schena received payments. On Feb. 27, Schena allegedly used a cellphone to take images of multiple documents, which were displayed on the monitor of his classified computer and marked as “SECRET.” Schena then allegedly left work and returned to his home in Alexandria, where the cellphone was seized.        

Schena is charged with conspiracy to gather, transmit, or lose national defense information and faces a penalty of up to 10 years in prison. A federal district court judge will determine any sentence after considering the U.S. Sentencing Guidelines and other statutory factors.

The FBI Washington Field Office investigated the case with assistance from the FBI Richmond Field Office, the Department of Justice’s Office of Enforcement Operations, and the Department of State’s Diplomatic Security Service Office of Counterintelligence.

Assistant U.S. Attorneys Michael Ben’Ary and Gavin R. Tisdale for the Eastern District of Virginia and Trial Attorney Maria Fedor of the National Security Division’s Counterintelligence and Export Control Section are prosecuting the case.

A criminal complaint is merely an allegation. All defendants are presumed innocent until proven guilty beyond a reasonable doubt in a court of law.

Source: United States Department of Justice Criminal Division

WASHINGTON — Today, the Department of Justice (DOJ), Department of Health and Human Services (HHS), Department of Education (ED), and the U.S. General Services Administration (GSA) announced the immediate cancellation of approximately $400 million in federal grants and contracts to Columbia University due to the school’s continued inaction in the face of persistent harassment of Jewish students. These cancellations represent the first round of action and additional cancellations are expected to follow. The Task Force is continuing to review and coordinate across federal agencies to identify additional cancellations that could be made swiftly. DOJ, HHS, ED, and GSA are taking this action as members of the Joint Task Force to Combat Anti-Semitism. Columbia University currently holds more than $5 billion in federal grant commitments.

On March 3rd, the Task Force notified the Acting President of Columbia University that it would conduct a comprehensive review of the university’s federal contracts and grants  in light of ongoing investigations under Title VI of the Civil Rights Act. Chaos and anti-Semitic harassment have continued on and near campus in the days since. Columbia has not responded to the Task Force.

“After the horrors of October 7th, Jewish students were shamefully targeted on American college campuses—including at Columbia University,” said Attorney General Pamela Bondi. “Any university which fails to account for the discrimination of its students will not be tolerated. Comply with federal anti-discrimination laws and take action to protect students or expect consequences.”

“Since October 7, Jewish students have faced relentless violence, intimidation, and anti-Semitic harassment on their campuses – only to be ignored by those who are supposed to protect them,” said Secretary of Education Linda McMahon. “Universities must comply with all federal antidiscrimination laws if they are going to receive federal funding. For too long, Columbia has abandoned that obligation to Jewish students studying on its campus. Today, we demonstrate to Columbia and other universities that we will not tolerate their appalling inaction any longer.”

President Trump has been clear that any college or university that allows illegal protests and repeatedly fails to protect students from anti-Semitic harassment on campus will be subject to the loss of federal funding.

“Freezing the funds is one of the tools we are using to respond to this spike in anti-Semitism. This is only the beginning,” said Leo Terrell, Senior Counsel to the Assistant Attorney General for Civil Rights and head of the DOJ Task Force to Combat Anti-Semitism. “Cancelling these taxpayer funds is our strongest signal yet that the Federal Government is not going to be party to an educational institution like Columbia that does not protect Jewish students and staff.”

The decisive action by the DOJ, HHS, ED, and GSA to cancel Columbia’s grants and contracts serves as a notice to every school and university that receives federal dollars that this Administration will use all the tools at its disposal to protect Jewish students and end anti-Semitism on college campuses.

“Anti-Semitism is clearly inconsistent with the fundamental values that should inform liberal education,” said Sean Keveney, HHS Acting General Counsel and Task Force member. “Columbia University’s complacency is unacceptable.”

GSA will assist HHS and ED in issuing stop-work orders on grants and contracts that Columbia holds with those agencies. These stop-work orders will immediately freeze the university’s access to these funds. Additionally, GSA will be assisting all agencies in issuing stop work orders and terminations for contracts held by Columbia University.

“Doing business with the Federal Government is a privilege,” said Josh Gruenbaum, FAS Commissioner and Task Force member. “Columbia University, through their continued and shameful inaction to stop radical protestors from taking over buildings on campus and lack of response to the safety issues for Jewish students, and for that matter – all students – are not upholding the ideals of this Administration or the American people. Columbia cannot expect to retain the privilege of receiving federal taxpayer dollars if they will not fulfill their civil rights responsibilities to protect Jewish students from harassment and anti-Semitism.”

For more information, read the HHS, ED, and GSA joint press release from Monday, March 3rd.

# # #

 

Source: United States Department of Justice Criminal Division

A former Iraqi refugee and legal permanent resident of Richmond, Texas, has entered a guilty plea to conspiracy to provide material support to a designated foreign terrorist organization.

Abdulrahman Mohammed Hafedh Alqaysi, 28, admitted to providing material support and resources to the Islamic State of Iraq and al-Sham (ISIS).

From 2015 to 2020, Alqaysi provided his computer expertise to develop and post logos for a media arm of the ISIS group known as the Kalachnikov team. He further sent hacking videos and instructions to ISIS members in addition to stolen credit card information and fraudulently created identity documents.

U.S. District Judge Alfred Bennett accepted the plea and has set sentencing for June 5. Alqaysi faces a maximum penalty of 20 years in prison and up to a $250,000 fine. Alqaysi has been and will remain in custody pending that hearing.

The FBI Houston Joint Terrorism Task Force investigated the case with assistance from Homeland Security Investigations.

Assistant U.S. Attorney Heather Winter for the Southern District of Texas is prosecuting the case with assistance from Trial Attorney Michael Dittoe of the National Security Division’s Counterterrorism Section.