Defense Contractor Employee Sentenced to Jail for Selling Highly Classified Zero-Day Exploits to Russian Broker

Post Views: 11

Former L3Harris Employee Sentenced to 7 Years for Selling Zero-Day Exploits to Russian Broker

A former employee of US defense contractor L3Harris has been sentenced to seven years in prison for selling eight zero-day exploits to a Russian broker in exchange for millions of dollars.

Background

Peter Williams, a 39-year-old Australian national, pleaded guilty to two counts of theft of trade secrets in October 2025. Williams, who held a senior role at L3Harris, exploited his position to enrich himself by selling the sensitive cyber capabilities to Operation Zero, a Russian exploit broker.

The Exploits

The tools, designed to be sold exclusively to the US government and select allies, could have been used to access millions of digital devices and engage in various malicious activities, including cyber fraud, theft, ransomware, and state-directed spying.

The Theft

The theft of the eight cyber-exploit components took place over a period of three years between 2022 and 2025. The actions are estimated to have incurred L3Harris $35 million in financial losses.

The Sale

Williams sold the trade secrets for up to $4 million in cryptocurrency, which he used to purchase properties, clothing, jewelry, and luxury watches.

US Department of Justice Action

The US Department of Justice has also announced the designation of Operation Zero, along with its director and owner Sergey Sergeyevich Zelenyuk, and Special Technology Services LLC FZ (STS), under the Protecting American Intellectual Property Act (PAIPA) in connection with the trade secret theft.

Sanctions

The US Department of the Treasury’s Office of Foreign Assets Control (OFAC) has also sanctioned Zelenyuk, Operation Zero, STS, and four other associated individuals and entities for acquiring and distributing cyber tools harmful to US national security.

According to the Treasury, Operation Zero has sold the tools acquired from Williams to at least one unauthorized user and has offered bounties for Telegram exploits and tools that could be used to break into Android and iPhone devices.

Operation Zero’s Activities

Operation Zero is believed to have engaged in efforts to recruit hackers to support its activities and develop business relationships with foreign intelligence agencies through social media. The exploit broker has been active since at least 2021 and has stated that it will only sell the exploits it acquires to customers from non-NATO countries.

Statements

Assistant Attorney General for National Security John A. Eisenberg stated that Williams exploited his position to enrich himself at the expense of the US and his employer, and that the tools he compromised were intended to protect the nation.

Assistant Director Roman Rozhavsky of the FBI’s Counterintelligence and Espionage Division warned that the FBI will not rest until those who betray their position of trust and sell sensitive American technology to foreign adversaries are brought to justice.