U.S. programmer outsources own job to China, surfs cat videos
January 17, 2013 -- Updated 0742 GMT (1542 HKT)
A U.S. programmer was fired after it was discovered he outsourced his work to China.
- U.S.-based company discovered its computer systems were being accessed from China
- Company's own employee gave access to Chinese programmers he personally outsourced
- Employee, known as "Bob", seen as "someone you wouldn't look at twice in an elevator"
- "Bob" earned several hundred thousand dollars a year, paying Chinese firm $50,000 a year
Hong Kong (CNN) -- Call it an amazing example of entrepreneurship or a daring play of deceit.
After a U.S.-based "critical infrastructure" company discovered in 2012 its computer systems were being accessed from China, its security personnel caught the culprit ultimately responsible: Not a hacker from the Middle Kingdom but one of the company's own employees sitting right at his desk in the United States.
The software developer is simply referred to as "Bob," according to a case study by the U.S. telecommunications firm Verizon Business.
Bob was an "inoffensive and quiet" programmer in his mid-40's, according to his employee profile, with "a relatively long tenure with the company" and "someone you wouldn't look at twice in an elevator."
Those innocuous traits led investigators to initially believe the computer access from China using Bob's credentials was unauthorized -- and that some form of malware was sidestepping strong two-factor authentication that included a token RSA key fob under Bob's name.
Investigators then discovered Bob had "physically FedExed his RSA token to China so that the third-party contractor could log-in under his credentials during the workday," wrote Andrew Valentine, a senior forensic investigator for Verizon.
Bob had hired a programming firm in the northeastern Chinese city of Shenyang to do his work. His helpers half a world away worked overnight on a schedule imitating an average 9-to-5 workday in the United States. He paid them one-fifth of his six-figure salary, according to Verizon.
And over the past several years, Bob received excellent performance reviews of his "clean, well written" coding. He had even been noted as "the best developer in the building."
A forensic image of Bob's workstation revealed his true work habits and typical day:
9:00 a.m. -- Get to work, surf Reddit, watch cat videos
11:30 a.m. -- Lunch
1:00 p.m. -- Ebay
2:00 p.m or so -- Facebook and LinkedIn
4:30 p.m. -- Send end-of-day e-mail update to management
5:00 p.m. -- Go home
The Verizon investigation suggested Bob's entrepreneurial outsourcing spirit stretched across several companies in his area -- netting him several hundred thousand dollars a year as he paid out about $50,000 a year to his China-based ghost writers, according to hundreds of PDF invoices also discovered on his work computer.
Verizon's Valentine told CNN via e-mail that Bob "was in fact terminated at the conclusion of the investigation."
Presumably Bob's Chinese helpers were as well.
Today's five most popular stories
Part of complete coverage on
October 9, 2014 -- Updated 0804 GMT (1604 HKT)
Liberia, Sierra Leone and Guinea -- the three countries facing the biggest health crisis -- are also facing huge bills to try and contain the virus.
September 22, 2014 -- Updated 1316 GMT (2116 HKT)
Twitter has lost its position in the top 20 coolest brands for the first time in three years.
September 25, 2014 -- Updated 1554 GMT (2354 HKT)
As the crisis in Iraq escalates, CNN looks at how Iraq could crack down on ISIS' oil riches under the guidance of its new oil minister, Adel Abdul Mahdi.
August 29, 2014 -- Updated 0842 GMT (1642 HKT)
Recep Tayyip Erdogan is Turkey's new president . So can he revitalize its economic fortunes?
September 19, 2014 -- Updated 1724 GMT (0124 HKT)
Experts share their tips on cities they see as emerging financial hubs...they're not where you think.
October 9, 2014 -- Updated 1511 GMT (2311 HKT)
Growing numbers of us are willing to serve as bank, teacher or travel agent to people we have never met, and entrust them to serve us in turn.
August 28, 2014 -- Updated 1244 GMT (2044 HKT)
The European Union is stepping in to save its dairy from going sour.
August 18, 2014 -- Updated 1236 GMT (2036 HKT)
Europe's deteriorating relationship with Russia has hit the region's growth, even before new food sanctions begin to bite.
July 16, 2014 -- Updated 1634 GMT (0034 HKT)
With cyberattacks on the rise and here to stay, it's a modern-day challenge for people and businesses to get smarter about preventing them.
August 14, 2014 -- Updated 1324 GMT (2124 HKT)
Airstrikes, rebels seizing control of oil fields, plus a severe refugee crisis are a recipe for market panic. So why are Iraq oil prices stable?
September 19, 2014 -- Updated 1124 GMT (1924 HKT)
Peer-to-peer finance lets businesses bypass bank loans. Creative companies with quirky ideas find new lending models advantageous.
July 20, 2014 -- Updated 1524 GMT (2324 HKT)
Evidence points to pro-Russian separatists as perpetrators of the attack and Vladimir Putin is facing questions, David Clark writes.
September 3, 2014 -- Updated 0952 GMT (1752 HKT)
CNN's Jim Boulden looks on the future of online shopping.
August 5, 2014 -- Updated 1440 GMT (2240 HKT)
The biggest Ebola outbreak in history is taking its toll in Western Africa, hitting some of West Africa's most vulnerable economies.