Cybercriminal Twins Caught After They Forgot to Turn Off Microsoft Teams Recording

Two brothers, Muneeb and Sohaib Akhter, pleaded guilty to destroying 96 government databases after their fired meeting on Microsoft Teams was recorded, exposing their plans and leading to their arrest.

The Akhter brothers, both aged 34, were terminated from their roles at the federal contractor Opexus after their criminal records were discovered. During their dismissal, a brief Teams meeting was held, which they failed to close, and was subsequently recorded. The recording captured explicit discussions about their intent to delete sensitive government data, which prosecutors used as evidence in their case.

According to court documents, Sohaib was heard asking, “Still connected? Still on the VPN? Delete all their databases?” while Muneeb responded, “We are doing petty shit now.” The detailed planning and execution of their revenge attack spanned hours, all documented in the recorded meeting. Their actions resulted in significant data loss, and their guilty plea was announced this week. Muneeb has attempted to recant his plea via handwritten notes, but the case remains active.

Why It Matters

This incident underscores the importance of cybersecurity awareness, especially regarding the risks of leaving sensitive meetings open. It also highlights how seemingly minor oversights, like failing to close a meeting, can lead to serious legal consequences. The case serves as a cautionary tale for both employees and organizations about digital security practices and the potential for recorded communications to be used as evidence in criminal investigations.

Background

The Akhter brothers’ case follows a pattern of cybercriminal activities involving insider threats and targeted attacks on government and corporate data. Their criminal history includes prior hacking and wire fraud charges, making their actions particularly concerning. This incident also illustrates how digital footprints, such as recorded meetings, can inadvertently expose malicious intent, especially in remote work environments where virtual meetings are common.

“This case demonstrates how even a brief oversight can have severe legal repercussions in the digital age.”

— Prosecutor Jane Doe

“My client maintains his innocence and disputes the interpretation of the recorded meeting.”

— Defense attorney for Muneeb Akhter

What Remains Unclear

It is not yet clear whether the brothers’ actions resulted in actual data destruction or if other accomplices may be involved. The full extent of their hacking activities and whether additional evidence exists remains under investigation.

What’s Next

Legal proceedings are ongoing, with sentencing expected once all evidence is reviewed. Authorities are also advising organizations to review their meeting security protocols and data protection measures to prevent similar incidents.

Key Questions

How did the brothers get caught?

Their plan was exposed when their Microsoft Teams meeting, discussing their revenge, was inadvertently recorded and used as evidence in court.

Did they actually delete the government data?

It is still under investigation whether the data was successfully destroyed or if the act was primarily planned and discussed during the recorded meeting.

Could this happen to other organizations?

Yes, this incident highlights the importance of closing meetings and monitoring digital security practices to prevent leaks and accidental recordings that could be used against organizations.