Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Crime AT&T Cellphones

Man Who Unlocked Nearly 2 Million AT&T Phones Gets 12 Years In Prison (theverge.com) 102

A man who the Department of Justice says unlocked AT&T customers' phones for a fee was sentenced to 12 years in prison, in what the judge called "a terrible cybercrime over an extended period," which allegedly continued even after authorities were on to the scheme. The Verge reports: According to a news release from the DOJ, in 2012, Muhammad Fahd, a citizen of Pakistan and Grenada, contacted an AT&T employee via Facebook and offered the employee "significant sums of money" to help him secretly unlock AT&T phones, freeing the customers from any installment agreement payments and from AT&T's service. Fahd used the alias Frank Zhang, according to the DOJ, and persuaded the AT&T employee to recruit other employees at its call center in Bothell, Washington, to help with the elaborate scheme. Fahd instructed the AT&T employees to set up fake businesses and phony bank accounts to receive payments, and to create fictitious invoices for deposits into the fake accounts to create the appearance that money exchanged as part of the scheme was payment for legitimate services.

In 2013, however, AT&T put into place a new unlocking system which made it harder for Fahd's crew to unlock phones' unique IMEI numbers, so according to the DOJ he hired a developer to design malware that could be installed on AT&T's computer system. This allegedly allowed him to unlock more phones, and do so more efficiently. The AT&T employees working with Fahd helped him access information about its systems and other employees' credentials, allowing his developer to tailor the malware more precisely, the DOJ said. A forensic analysis by AT&T showed Fahd and his helpers fraudulently unlocked more than 1.9 million phones, costing the company more than $200 million. Fahd was arrested in Hong Kong in 2018 and extradited to the US in 2019. He pleaded guilty in September 2020 to conspiracy to commit wire fraud.

This discussion has been archived. No new comments can be posted.

Man Who Unlocked Nearly 2 Million AT&T Phones Gets 12 Years In Prison

Comments Filter:
  • by b0s0z0ku ( 752509 ) on Friday September 17, 2021 @06:45PM (#61805919)
    He'd have gotten less prison time for shooting someone in a bar fight (non-premeditated murder) than for preventing AT&T from milking their customers.
    • Re: (Score:3, Insightful)

      by b0s0z0ku ( 752509 )
      Meanwhile, scum like Eddie Gallagher get a pardon instead of the firing squad they deserve.
    • In many states that would be 25-to-life.

      You probably live in the south.

  • Prison? (Score:4, Insightful)

    by darkain ( 749283 ) on Friday September 17, 2021 @06:48PM (#61805925) Homepage

    Prison? This guy sounds like a hero! It should be legally mandated that phones are *NOT* locked to particular carriers, or have locked bootloaders.

    • It should be legally mandated that phones are *NOT* locked

      Anyone who wants an unlocked phone and is willing to pay for it can already buy one.

      The key part is "willing to pay for it".

      • There's already a contract requiring the phone owner to pay for the phone, having a carrier lock is to lock the owner to the carrier. In Canada you only need to ask the carrier to unlock it.

        • Actually any new phone is sold unlocked. But carriers are required to unlock older phones sold before the regulation was put in place.
          • Actually any new phone is sold unlocked. But carriers are required to unlock older phones sold before the regulation was put in place.

            That sounds like a very effective way to prevent future phone unlocking "crimes." Our legal systems have more important things to deal with. In the EU, it's also illegal to impose penalties for cancelling phone contracts.

        • by j-beda ( 85386 )

          All phones sold in Canada since December 2017 are already unlocked. Older devices can be unlocked by the wireless carrier at no cost to the customer.

          https://www.whistleout.ca/Cell... [whistleout.ca]

          I thought there was momentum towards similar legislation in the US? One can dream I suppose.

    • I think the issue was that he was unlocking phones people owed money on and then the people stopped paying for the phones. With the phone locked AT&T can disable service and you've got a paper weight. With it unlocked you possibly just stole $1200 bucks.

      12 years is still way, _way_ too much.
      • by JBMcB ( 73720 ) on Friday September 17, 2021 @07:44PM (#61806049)

        12 years is still way, _way_ too much.

        If all he was doing was unlocking cell phones, I'd agree with you. However:

        In 2013, however, AT&T put into place a new unlocking system which made it harder for Fahd's crew to unlock phones' unique IMEI numbers, so according to the DOJ he hired a developer to design malware that could be installed on AT&T's computer system.

        He also bribed AT&T employees to give him access to their computer systems and stole other employee credentials. This goes *way* beyond bypassing some security feature on a phone.

        • I agree, but 12 years is excessive. Jordan Belfort was locked up for less than 2.

          • Jordan Belfort was locked up for less than 2.

            Belfort was sentenced to 4 years which got reduced to under 2 years because he ended up cooperating with authorities to help bust his partners and others involved. Belfort also paid back millions to his victims as part of the deal.

            We don't know how long Fahd will serve. If there were other players or bigger fish Fahd could help authorities go after, he could have worked out a cooperation deal for a reduced sentence, but he's the sole mastermind behind this scheme. And I don't see is mentioned anywhere how

            • I left out the part where Belfort didn't install malware on any company's computer system that allowed him access to internal company information

              In 2013, however, AT&T put into place a new unlocking system which made it harder for Fahd's crew to unlock phones' unique IMEI numbers, so according to the DOJ he hired a developer to design malware that could be installed on AT&T's computer system. This allegedly allowed him to unlock more phones, and do so more efficiently. The AT&T employees working with Fahd helped him access information about its systems and other employees' credentials, allowing his developer to tailor the malware more precisely, the DOJ said.

        • by sjames ( 1099 )

          So he stole money from a band of thieves?

      • IMHO, cell carriers and/or Google/Apple (whoever is the at-fault party) should have to pay an e-waste tax for each intentionally bricked phone.

      • by Bert64 ( 520050 )

        If you stop paying before the contract term ends you are in breach of contract and there are already laws to deal with that.
        If someone is unable to pay the service contract due to financial hardship, turning the handset into a paperweight doesn't make them any more able to pay - it makes them less able.
        It also generates more unnecessary e-waste.

      • Which is bullshit, because even before cell phones, there was no shortage of things you were able to stop paying for.

        With the phone locked AT&T can disable service

        That can happen with any phone.

    • rison? This guy sounds like a hero! It should be legally mandated that phones are *NOT* locked to particular carriers, or have locked bootloaders.

      Nice try, Osama, I mean, Mr. Bin Laden, but that's not how we do things here in Benevolent Justice Freedomland!

      What I want to know is, why do you hate our corporation's freedoms? Does their freedom to control the private property of their customers, even when the property is fully paid for, displease you people? You jealous because you can only buy your goats, no

    • locked phones are often sold for lower then cost that they make up with fees and that attracts customers to them hear is a 500$ phone for free etc. unlocked phones are bought direct from the maker and some carrers will offer it as a option. you pay in full for the hardware but its free to go to any supported network. so when a phone is unlocked before its paid for the customer brakes the contact and runs off with the hardware.
      • by Bert64 ( 520050 )

        Customers don't just break the contract terms because they want to take the phone. Why would they do that? It will result in them being chased for the unpaid debt and having a poor credit rating as a result. Plus you would only be able to do it once before you got blacklisted.

        If you wanted to try doing it repeatedly using false identities that would be a crime known as fraud, for which there are also laws. If someone is going to commit a crime to obtain handsets for resale, then why wouldn't they simply ste

  • Comment removed (Score:5, Insightful)

    by account_deleted ( 4530225 ) on Friday September 17, 2021 @06:52PM (#61805933)
    Comment removed based on user account deletion
    • by PPH ( 736903 )

      inane and customer hostile business model

      The alternative would be to provide pay as you go cellular service. And then expect customers to cough up many hundreds (if not a thousand dollars or more) to purchase some inane iDevice. Few people would do it. And worse yet, when the service providers wanted to upgrade their systems from 2/3G to 4/5G, quite a few customers would balk at throwing out perfectly good older generation phones.

      It's not customer hostile on its own. That would be the cellular companies' need to expand into new markets and provid

      • by fuzznutz ( 789413 ) on Friday September 17, 2021 @08:58PM (#61806247)

        The alternative would be to provide pay as you go cellular service. And then expect customers to cough up many hundreds (if not a thousand dollars or more) to purchase some inane iDevice. Few people would do it.

        You can literally buy an Android phone and get a month's prepaid service for less than $100 at WalMart. Are you advocating for indentured customers that can't afford an "iDevice" to buy one on time just so they can show off their new shiny?

      • Comment removed (Score:4, Insightful)

        by account_deleted ( 4530225 ) on Friday September 17, 2021 @09:00PM (#61806253)
        Comment removed based on user account deletion
      • Phone manufacturers can offer payment in instalments if they want. They can even do this through the mobile serrvice provider. This is exactly what they do already, except they disguise it as a service plan.
    • by witz2 ( 8211674 )
      There are some "aces in the hole" to make some reboots. Be careful what you wish for.
    • ...imprisoning someone for failing to prop up an inane and customer hostile business model. For twelve fucking years.

      Meanwhile "Harvard Swimmers" get sentenced to six months. Trump University results in a slap on the wrist. Cops who flat out murder motorists get... zilch. Maybe it's time we had a reboot of the entire justice system.

      Your problem, is assuming we still have a justice system.

      We don't.

      We have a legal system created by those profiting from it, and you're only starting to see the corrupt difference between the two. And it will get far worse, because Greed.

  • by null etc. ( 524767 ) on Friday September 17, 2021 @06:53PM (#61805939)

    Fahd and his helpers fraudulently unlocked more than 1.9 million phones, costing the company more than $200 million.

    So each unlocked phone cost AT&T approximately $100 in profits. You really have to question the financial structures that let large companies bilk consumers for money just by flipping a software switch in a hardware device.

    • by fulldecent ( 598482 ) on Friday September 17, 2021 @08:20PM (#61806147) Homepage

      Houses cost $500k. And they can be given to the resident just by flipping a blob of ink over the mortgage lien on their title document.

      You really have to question this financial structure!

    • by tlhIngan ( 30335 ) <slashdot&worf,net> on Friday September 17, 2021 @09:09PM (#61806285)

      So each unlocked phone cost AT&T approximately $100 in profits. You really have to question the financial structures that let large companies bilk consumers for money just by flipping a software switch in a hardware device.

      It's not just that. He actually got employees to put malware on AT&T's systems so he can continue to make money.

      That's the reason why. It's less about the $100 - he probably charged people $50+ for the privilege.

      It's less about unlocking phones, and more about he had written malware and bribed employees to install it on the AT&T computer network so he could continue with his business.

      Most of that $200M is probably not from unlocking phone fees but costs incurred by AT&T to clean out their computer system to make sure the malware was removed completely. It's likely AT&T's losses in that department are probably very small. Think of it this way - if he unlocked 10,000 phones this way, the loss to AT&T would be $1M.

    • by Cederic ( 9623 )

      Look at it another way. A phone is capital expenditure for the company, offset against an expected revenue stream.

      That revenue stream comes with a few risks, one of which is the customer choosing not to pay.

      Locking the phone discourages that choice, mitigating that risk, and thus lowering the cost of that risk. The result is a cheaper price for the customer, because less of their money is being used to cover the risk of non-payment by other customers.

      Another risk is that the phone will be stolen. If it's lo

      • Look at it another way. A phone is capital expenditure for the company, offset against an expected revenue stream.

        It's really the phone carrier's choice to not collect that revenue stream all at once, before purchase, similar to how most other products in the known world are purchased.

        • by Cederic ( 9623 )

          It's their choice to advance credit as part of a product offer, yes.

          That doesn't make it an invalid choice. That doesn't mean they shouldn't mitigate the financial risks associated with that business model. That doesn't mean it isn't capital expenditure or that its an investment by the company to create an asset that will bring future cash flow.

          What's the point you were trying to make?

          • The point is that the carriers are "advancing credit" to the consumer, but calling it something else, trying to hide what it is. You can't be disappointed when people game the system in that circumstance.

  • How does unlocking their phone free them from installment payments? They still have to pay for the phone. They still have to pay for service. And if they stop service early then they get nailed for early termination.

    This makes no sense.
    • How does unlocking their phone free them from installment payments?

      Perhaps they just stop paying AT&T and ignore the debt collectors?

      • by ShanghaiBill ( 739463 ) on Friday September 17, 2021 @07:12PM (#61805987)

        Perhaps they just stop paying AT&T and ignore the debt collectors?

        Indeed. Many people have such terrible credit that they just don't care anymore.

        I have a niece like that. Her FICO score is around 400. She gets tons of free stuff by buying on the installment plan and then just not paying.

        She lived with me for a year (because no one would rent to her), and she got so much mail from debt collectors that we were able to put it in the fireplace and heat the house for a week.

        • by Bert64 ( 520050 )

          And she suffers the consequence that noone will rent to her.

          Those companies that allow her to have an instalment plan despite her poor credit rating are shooting themselves in the foot here. The whole point of credit ratings is to determine if someone should be given credit or not. Your niece should not be given credit as she has demonstrated she cannot be trusted with it.

    • I doubt it's the unlocking that got him busted... it's probably more the fraudulent businesses and invoices and malware installed on AT&T systems.

      Plenty of people have found ways to unlock phones without getting busted for it, because it's not illegal in and of itself (at least, not in the US, despite carriers wanting it to be). Paying employees of a company for confidential information, having someone create malware, and getting it installed on the systems of a major telco, however, is very illegal.

    • > How does unlocking their phone free them from installment payments?

      Some stupid phone companies had free phones when you agreed to pay for a $129/mo phone plan.

      It duped stupid consumers too but apparently some people took advantage of it and then bypassed the port lock.

      It's the typical case of everybody trying to get something for nothing.

    • The actual crime charged was wire fraud.

      Part of the crime was advising people how to create fake names and companies to get the subsidized phones. If AT&T tried to go after the name on the contract they wouldn't find an actual person.

  • Lots about this case that I don't understand. How did he cost AT&T $200 million? Presumably the owners of the phones wanted them unlocked, so using "malware" was done at their behest. I don't see how this is a crime, frankly. The deal with the guy with inside secret information, that I can understand being a problem. But not the rest. Strange story. I'd love to know the rest of the details because what was in the article certainly didn't make sense to me. Must be missing something.

  • The only way he could be more of a hero is if he had done it for free.

  • My God, this criminal may be the most heinous person alive.

    Could you imagine, I mean, IMAGINE what would happen if you gave people the keys to their house; the keys to their car; the root password to their computers, etc ... before they had fully paid these things off?

    Imagine it!

    I mean, what if these people had bought their phones with a credit card, and the credit card company let them do what they pleased with the phones, buy, sell them, whatever, without the devices being locked down by the credit card c

    • contacted an AT&T employee via Facebook and offered the employee “significant sums of money” to help him ...
      instructed the AT&T employees to set up fake businesses and phony bank accounts to receive payments, and to create fictitious invoices for deposits into the fake accounts to create the appearance that money exchanged ...
      he hired a developer to design malware that could be installed on AT&T’s computer system ...
      It’s not clear from the DOJ release whether anyone besides AT&T was harmed as a result of the scheme

      In the old days hacking AT&T would get you a life sentence.

  • Why even bother locking the phones. Just take care of your customer. Take note mba's... Carrot usually works better than a stick. And now this one will cost us tax payers another 10million or so. Good job!
    • you can easily buy a unlocked phone from Samsung and even apple. but you are going to pay upfront for the hardware and that can be alot of money for the newest flagship. so the carriers swoop in and give you the phone at a deeply discounted price that is made up over the time of the contract. when someone unlocks a phone before its contract term is up the customer runs off with hardware they have not paid for fully yet.
      • by Bert64 ( 520050 )

        So?
        In countries where phones are provided unlocked, carriers still offer rental terms for handsets.
        It's possible to take a cash loan, use it to buy an unlocked phone (or anything else for that matter) and then not repay the loan.
        Most goods purchased on credit are not locked to anything, it's possible to do exactly the same with these.
        It's possible for someone to stop paying for a contract even if the phone is locked, it just generates e-waste which doesn't benefit anyone.
        There are many legitimate cases wher

      • It's not my job to prop up your crappy business idea.

        And neither is it that of the justice system.

      • This is one of the reasons that I like T-Mobile. They don't discount phone prices and then end up charging twice the cost over the life of your contract. They basically just give you an interest-free loan; you pay the regular retail cost of the phone over X months, and if you cancel your service, you have to pay whatever you still owe for the phone.
  • "freeing the customers from any installment agreement payments" - but they still have the phone, the lock is just an awful stick forcing people to stay with the network - but unlocking the phone doesn't free them from their obligations under whatever contract they made with AT&T.

    • people dont care they will brake the contract and run off with the hardware. change the imei to one that isnt black listed and go to a cheaper carrier.
      • by Bert64 ( 520050 )

        And the cheaper carrier won't provide them service or insists on payment up front because they now have a poor credit rating.

        Those same people could take out a cash loan, use it to buy an unlocked handset, and then refuse to repay the loan. Locking the handset makes no difference to someone who intentionally wants to break the contract.
        On the other hand, those who intend to fulfil the contract terms are harmed - someone who wants to use a tourist sim while they travel, someone who wants to sell or gift the

      • Then I guess you should have chosen a business model that doesn't rely on adhesive contracts to be profitable.

    • They bought the phones with fake names, so there's no actual person for AT&T to go after to fulfill the contract.

  • Phone locking should be criminal. Not unlocking. Thanks G we do not have such nonsense on the other side of the pond. My phone is MY and I do with it whatever I want, period. And that is a huge waste of resources both for the dumb company as well for the state to keep such nonsense activities.
  • Even after the phone is paid off it is not guaranteed that it can be unlocked. They gave me an "unlock code" that did not work, and that was it. No one went to prison for keeping my phone locked.
  • Seriously, what did he do?

    • From the actual DOJ press release https://www.justice.gov/opa/pr... [justice.gov]

      "Fahd instructed the recruited employees to set up fake businesses and bank accounts for those businesses, to receive payments and to create fictitious invoices for every deposit made into the fake businesses’ bank accounts to create the appearance that the money was payment for genuine services."

      "Fahd hired a software developer to design malware that could be installed without authorization on AT&T’s computer system to unloc

  • Some people get less time for killing someone
  • I always believed IMEI numbers where unique ( in the same way ethernet mac addresses are supposed to be), whave I been wrong all this time, or am i dealing whir a badly written summary?
  • "He pleaded guilty to conspiracy to commit wire fraud in September 2020."

    He was engaged in fraud, money laundering, unauthorized computer access, and conspiracy to do all of the se above. He was charged with wire fraud.

    Unlocking phones was just something done in the process of the criming, not the crime in itself. Imagine if the headline was "Man who walked down the street gets 12 years in prison".

  • The PIGs unlock phones every chance they get. I do not hear tales of the PIGs being thrown in prison (preferably with a morning and afternoon ration of lashes with the Cat-o-Nine).

    It is completely amazing that there are two sets of laws -- one for the peasant class, and another for the PIG class.

  • This man broke the law and deserves some consequences but the sentence he was given seems very harsh. Crimes like rape and murder can see smaller sentences that this. I guess the reason for this is that the laws against computer crime have greater penalties than many other crimes. Seems like those laws should be reformed so the consequences are more in line with the nature of the crimes!

"I'm a mean green mother from outer space" -- Audrey II, The Little Shop of Horrors

Working...