Find notable cyber news and cases, enriched with sources, timelines, and signals.

Davis Lu sentencing for Windows sabotage

Law Enforcement
First reported
Last updated
Happening score
H score 19
1 unique sources, 1 articles

Summary

Hide ▲

Davis Lu was sentenced to four years in prison for sabotaging his former employer's Windows network, turning an insider dispute into a cybercrime conviction. The attack used custom malware and a kill switch tied to Active Directory that could lock out users when his account was disabled. The sentence highlights the legal consequences of workplace sabotage that disrupts production systems and access for thousands of users.

Timeline

  1. 22.08.2025 02:46 1 articles · 9mo ago

    Active Directory kill switch locks out thousands of users at the affected company

    Victim Impact Update

    On September 9, 2019, the affected organization disabled Davis Lu's account, which triggered the IsDLEnabledinAD kill switch and locked thousands of users out of their systems. The sabotage was tied to malicious code embedded in the company's Windows production environment and was designed to punish the organization after workplace changes in 2018.

    Show sources
  2. 22.08.2025 02:46 1 articles · 9mo ago

    Four-year prison sentence imposed for Windows network sabotage

    Legal Policy Action Update

    On August 21, 2025, Davis Lu was sentenced to four years in prison for sabotaging his ex-employer's Windows network with custom malware, an infinite Java thread loop, and the IsDLEnabledinAD kill switch. The sentence reflected insider sabotage of enterprise systems that caused account lockouts and financial losses for the affected U.S. company.

    Show sources