Former L3Harris Trenchant boss pleads guilty to selling zero-day exploits to Russian broker

Peter Williams, the former general manager of defense contractor L3Harris, has confessed to selling surveillance technology to a Russian intermediary that specializes in acquiring cyber tools, as confirmed by the U.S. Department of Justice on Wednesday. The stolen material, taken over three years from L3Harris, consisted of national security-oriented software, including at least eight sensitive cyber-exploit components. According to the DOJ's statement, these components were intended exclusively for the U.S. government and its select allies. TechCrunch previously reported that the company had been probing a leak of its hacking tools. Williams misused his access to L3Harris's secure network to pilfer these cyber-exploit components. He led Trenchant, the division responsible for developing spyware, exploits, and zero-day vulnerabilities—security flaws in software that have not yet been disclosed by their creators. Trenchant provided its surveillance technology to government clients in Australia, Canada, New Zealand, the United States, and the United Kingdom, known collectively as the Five Eyes intelligence alliance. Founded after L3Harris's acquisition of two Australian startups, Azimuth and Linchpin Labs, in 2019, Trenchant was established to sell zero-day vulnerabilities to the Five Eyes alliance. The DOJ reported that Williams, a 39-year-old Australian citizen residing in Washington, D.C., sold these exploits to an unnamed Russian broker who offered him millions in cryptocurrency as payment. Williams allegedly entered contracts that outlined an initial payment plus additional fees for ongoing support. While the identity of the Russian broker remains undisclosed, prosecutors noted that the broker markets itself as a reseller of exploits to various clients, including the Russian government. U.S. Attorney Jeanine Pirro remarked that this broker is part of “the next wave of international arms dealers.” She highlighted that Williams' actions resulted in over $35 million in losses to Trenchant. “Williams betrayed the United States and his employer by first stealing and then selling intelligence-related software,” stated U.S. Assistant Attorney General for National Security John A. Eisenberg. He described Williams' actions as calculated and deceitful, jeopardizing national security for personal profit. A spokesperson for L3Harris declined to provide comments, while Williams' legal representatives also did not respond promptly to inquiries. In mid-October, the U.S. government formally accused Williams, known in industry circles as “Doogie,” of selling trade secrets without detailing the nature of these secrets or the company from which they were stolen. Documents revealed that he earned $1.3 million from the sale of the exploits. Williams pleaded guilty to two counts of stealing trade secrets, each carrying a potential ten-year prison sentence, and is scheduled for sentencing in January 2026. Currently, he is under house arrest in the Washington D.C. area. Previously, he worked at the Australian Signals Directorate, the nation's premier signals intelligence and eavesdropping agency. The Australian agency refrained from commenting on the matter, citing law enforcement protocols. Recent reports indicated that Williams had terminated a Trenchant developer earlier this year, who was suspected of stealing Chrome zero-days. That former employee maintained he never had access to such tools, claiming he worked solely on iOS zero-days, a statement supported by former colleagues. "I know I was a scapegoat. I wasn’t guilty. It’s very simple," he asserted, emphasizing his innocence amid the controversy.