Software Developer Caught Outsourcing Own Job

Do you fire an employee for not doing his job, or do you promote him for being brilliant?

1. More from TODAY.com
   1. Jersey Shore to celebrate re-opening 7 months after Sandy
      

      Seven months after being devastated by the worst storm in New Jersey history, most of the beaches and boardwalks of the Je...

   2. Man finds first Superman comic stuffed in wall
   3. Girl, 14, rocks Internet with Van Halen guitar solo
   4. One-of-a-kind African school gives girls 'Right to Dream'
   5. Cops stand in for fallen officer at daughter's kindergarten graduation

That thought may have crossed the minds of supervisors at an unidentified American critical-infrastructure company mentioned on Verizon's computer-security blog Monday (Jan. 14).

An audit of the firm's server logs revealed an alarming amount of unexplained logins from China into the company's virtual private network.

It appeared that a Chinese hacker was breaking into the corporate network almost every day by using an employee's RSA key, a random-passcode-generating token.

But that specific employee, a software developer, was in the building every day sitting at his desk.

Had someone stolen his identity? Was this a result of the 2011 RSA hack that exposed the seed numbers for millions of passcode generators?

Fearing that millions of dollars in company secrets had been stolen by Chinese hackers, the company brought in Verizon investigators.

The team took a look at the employee's computer for evidence of malware infection. What they found amazed them.

The employee wasn't doing any work at all. He just surfed the Web and checked email all day.

Every week, he received an invoice — from China.

It turned out the employee, who was considered one of the best software developers in the company, had completely outsourced his job and was paying Chinese developers about one-fifth of his own six-figure salary.

He'd even sent the Chinese developers his passcode generator so they could log into the company's network on his behalf every day.

There was evidence he was pulling the same scam at other companies as well.

The Verizon blog posting didn't mention whether the man still worked at the company.

• 8 Ways Seniors Can Avoid Identity Theft
• Deadly Device Hacks May Be Coming Soon
• 10 Best Anti-Virus Products