Singapore jails man for teaching malware use

Graham Cluley reports that a man in Singapore has been jailed, not for launching a cyberattack himself, but for teaching others how to do it. This marks a significant development in how cybercrime is being prosecuted.

Cheoh Hai Beng, a 49-year-old Malaysian national, received a five-and-a-half-year prison sentence and a fine of S$3,608 (about $2,700 USD). He admitted to creating approximately 20 video tutorials between February and May 2023, demonstrating how to infect Android phones with the Spymax remote access trojan (RAT). These videos detailed how to install, control, and utilize the malware to hijack smartphones, access cryptocurrency apps, capture passwords, control cameras, and track locations. The tutorials were shared on criminal networks, with victims typically lured through phishing messages or fake download links.

This case represents Singapore's first prosecution specifically targeting an individual for instructing others on malware usage. It highlights a shift in law enforcement focus towards disrupting the supply chain of cybercrime, not just the perpetrators. The jailing of Cheoh underscores severe consequences for enabling criminal activity, even without direct participation in the attacks themselves.

Source: Graham Cluley, Bitdefender