DOJ says Trenchant boss sold exploits to Russian broker capable of accessing ‘millions of computers and devices’

The erstwhile brag of a U.S. shaper of hacking and surveillance tools stole and sold exertion that tin hack millions of computers and radical worldwide, U.S. prosecutors person confirmed for the archetypal time.

In October, Australian nationalist Peter Williams, 39, pleaded blameworthy to selling 8 hacking tools that helium stole from his leader Trenchant, a part of the U.S. defence contractor L3Harris, which sells its surveillance-enabling tools to the U.S. authorities and its closest allies. Williams admitted to making much than $1.3 cardinal successful crypto from the income betwixt 2022 and 2025, per the Justice Department.

In a tribunal document published connected Tuesday, national prosecutors said Williams’ actions “directly harmed” the U.S. quality assemblage by selling the hacking tools to a Russian company, which counts the Russian authorities among its customers. 

While it was known that Williams sold Trenchant’s exploits — bundle that takes vantage of flaws successful different bundle usually to summation entree to someone’s machine oregon instrumentality — prosecutors present accidental that these 8 tools could person been utilized to indiscriminately alteration authorities surveillance, cybercrime, and ransomware attacks crossed the globe. 

This latest disclosure comes up of Williams’ anticipated sentencing connected February 24 successful a Washington D.C. national court. In its sentencing memorandum, which prosecutors usage to transportation a tribunal into handing down the maximum punishment, the Justice Department said that the exploits sold by Williams would person allowed the Russian broker and its customers to “potentially entree millions of computers and devices astir the world, including successful the United States.”

Prosecutors asked the justice to condemnation Williams to 9 years successful prison, with 3 years of supervised release, a mandatory restitution of $35 million, and a maximum good of $250,000. Williams is expected to beryllium deported to Australia aft serving his sentence, the memorandum said. 

In effect to the prosecutors’ memorandum, Williams submitted a letter to the justice explaining his decisions, saying that helium regretted his actions. 

“I made choices that straight violated the values I believed successful and the spot placed successful maine by my family, colleagues, and friends,” wrote Williams. “I admit present that I allowed myself to disregard my obligations and my training, and I failed to question assistance oregon guidance erstwhile I knew I was moving successful the incorrect direction.”

Williams’ lawyer John P. Rowley wrote successful response to prosecutors that nary of the stolen hacking tools were classified, and determination was nary grounds that Williams knew the tools would extremity up successful the hands of the governments of Russia oregon different country. His lawyer said that Williams did not mean to harm the U.S. and his autochthonal Australia, “although helium present recognizes that was a effect of his actions.”

When reached by TechCrunch, Justice Department spokesperson Pierson Furnish declined to comment. Rowley, Williams’ attorney, did not respond to a petition for comment. 

From scapegoat to sentencing

During mid-2025, respective sources with cognition of the violative cybersecurity manufacture told TechCrunch that idiosyncratic moving for Trenchant had stolen delicate hacking tools and sold them to an adversary of the United States. 

A erstwhile Trenchant worker came forward, telling TechCrunch that helium had been wrongly fired aft the institution accused him of stealing and leaking details of immoderate of the company’s exploits.

But by October, prosecutors formally accused Williams, who besides goes by “Doogie” and was Trenchant’s wide manager astatine the time, of being down the theft of the company’s hacking tools. The U.S. authorities charged Williams with selling the exploits to a Russian broker successful speech for crypto.  

Prosecutors said that FBI agents were successful interaction with Williams from late-2024 until the clip of his apprehension successful mid-2025, during which helium was overseeing Trenchant’s interior probe into the theft of the company’s secrets.

Despite the ongoing investigation, Williams continued to merchantability the company’s secrets and exploits — technically known arsenic zero-days since the bundle shaper affected hadn’t had clip to hole them — adjacent erstwhile helium was alert that the FBI was investigating the theft and merchantability of Trenchant’s hacking tools. 

Williams besides oversaw the firing of the Trenchant worker accused of leaking the tools, sources told TechCrunch and prosecutors person since confirmed. The fired worker told TechCrunch that helium believed helium was a scapegoat for idiosyncratic other astatine the company. Weeks aft his firing, the worker received a notification from Apple that helium had been targeted with authorities spyware, which has inactive not been explained. 

“[Williams] stood idly by portion different worker of the institution was fundamentally blamed for the Defendant’s ain conduct,” the prosecutors wrote successful their sentencing memorandum. “He looked connected portion an interior firm probe falsely formed blasted connected his subordinate.”

A spokesperson for Trenchant did not respond to a petition for remark astir Williams oregon its investigation.

It was lone connected August 6 erstwhile FBI agents obtained and executed hunt warrants for William’s home, and past confronted Williams with grounds that showed receipts of crypto payments, the alias helium utilized to interact with the Russian broker that purchased the stolen commercialized secrets, and his declaration with the broker. 

The Russian broker is apt Operation Zero, which offers up to $20 cardinal for tools to hack into Android devices and iPhones. The institution explicitly says it lone sells to the Russian authorities and section organizations. 

Operation Zero did not instrumentality a petition for comment.

Prosecutors called the broker, which it did not name, “one of the world’s astir nefarious exploit brokers,” and said that Williams chose it because, “by his ain admission, helium knew they paid the most.”

Williams’ “desire for much money, a amended lifestyle, bigger location and much jewels and trinkets simply could not beryllium satiated, and helium chose to hazard it each to betray his company, his colleagues, and the United States and its allies to fulfill that desire,” the prosecutors wrote.