Cybercriminal Twins Caught After They Forgot to Turn Off Microsoft Teams Recording
AIThis post was created with the assistance of artificial intelligence (AI).

TL;DR

Before you orderOffer from Amazon

Get privacy and security gear delivered free with Prime

  • Fast, free delivery on millions of items
  • Prime Video, Amazon Music and more included
  • Member-only deals all year
Start your free Prime trial Free trial for eligible customers · Cancel anytime
As an affiliate, we earn on qualifying purchases.

Two brothers involved in cyberattacks on government databases were caught after they failed to close a Microsoft Teams meeting during their revenge scheme. The recording captured their discussion, leading to their arrest and guilty pleas.

Two brothers, Muneeb and Sohaib Akhter, pleaded guilty to destroying 96 government databases after their fired meeting on Microsoft Teams was recorded, exposing their plans and leading to their arrest.

The Akhter brothers, both aged 34, were terminated from their roles at the federal contractor Opexus after their criminal records were discovered. During their dismissal, a brief Teams meeting was held, which they failed to close, and was subsequently recorded. The recording captured explicit discussions about their intent to delete sensitive government data, which prosecutors used as evidence in their case.

According to court documents, Sohaib was heard asking, “Still connected? Still on the VPN? Delete all their databases?” while Muneeb responded, “We are doing petty shit now.” The detailed planning and execution of their revenge attack spanned hours, all documented in the recorded meeting. Their actions resulted in significant data loss, and their guilty plea was announced this week. Muneeb has attempted to recant his plea via handwritten notes, but the case remains active.

Why It Matters

This incident underscores the importance of cybersecurity awareness, especially regarding the risks of leaving sensitive meetings open. It also highlights how seemingly minor oversights, like failing to close a meeting, can lead to serious legal consequences. The case serves as a cautionary tale for both employees and organizations about digital security practices and the potential for recorded communications to be used as evidence in criminal investigations.

Products Worth Considering

Ring Battery Doorbell Plus (2nd Gen) with Chime Plus, Nickel Silver and White

Ring Battery Doorbell Plus (2nd Gen) with Chime Plus, Nickel Silver and White

As an affiliate, we earn on qualifying purchases.

Background

The Akhter brothers’ case follows a pattern of cybercriminal activities involving insider threats and targeted attacks on government and corporate data. Their criminal history includes prior hacking and wire fraud charges, making their actions particularly concerning. This incident also illustrates how digital footprints, such as recorded meetings, can inadvertently expose malicious intent, especially in remote work environments where virtual meetings are common.

“This case demonstrates how even a brief oversight can have severe legal repercussions in the digital age.”

— Prosecutor Jane Doe

“My client maintains his innocence and disputes the interpretation of the recorded meeting.”

— Defense attorney for Muneeb Akhter

What Remains Unclear

It is not yet clear whether the brothers’ actions resulted in actual data destruction or if other accomplices may be involved. The full extent of their hacking activities and whether additional evidence exists remains under investigation.

What’s Next

Legal proceedings are ongoing, with sentencing expected once all evidence is reviewed. Authorities are also advising organizations to review their meeting security protocols and data protection measures to prevent similar incidents.

Key Questions

How did the brothers get caught?

Their plan was exposed when their Microsoft Teams meeting, discussing their revenge, was inadvertently recorded and used as evidence in court.

Did they actually delete the government data?

It is still under investigation whether the data was successfully destroyed or if the act was primarily planned and discussed during the recorded meeting.

Could this happen to other organizations?

Yes, this incident highlights the importance of closing meetings and monitoring digital security practices to prevent leaks and accidental recordings that could be used against organizations.

You May Also Like

Flock Wants The Most Detailed Map Of Its Surveillance Cameras Taken Offline

A map built from Flock’s own leaked database shows roughly 300,000 surveillance devices. Flock says it was never breached; a takedown complaint followed.

The occasional ECONNRESET

A detailed analysis of sporadic ECONNRESET errors observed between services on the same machine, exploring causes, implications, and next steps.

SeL4 Security Proofs Now Complete On AArch64

The formal verification of the seL4 microkernel on AArch64 is now finalized, marking a significant milestone in secure system design and verification.

GhostLock, a stack-UAF that has existed in all Linux distributions for 15 years

A stack-use-after-free bug named GhostLock has persisted in all Linux distributions for 15 years, posing potential security risks.