School employee charged with capturing other staff’s financial information using malware

Cybercrime Squad detectives have charged a man over allegedly deploying malware on Department of Education computers and capturing the personal information of school staff.

In February 2024, detectives attached to State Crime Command’s Cybercrime Squad – with assistance from the Department of Education – commenced an investigation into reports malware was located on computers at a Sydney school.

On Monday 4 March 2024, detectives spoke to a 28-year-old man and employee of the school at an address in Matraville, where they seized a phone and computer.

During a forensic examination of the phone, police located an amount of child abuse material. The material was not linked to the school or any students.

Following further inquiries, about 9.25am today (Tuesday 26 March 2024), officers arrested the 28-year-old man at Maroubra Police Station.

He was charged with unauthorised modification of data with intent to cause impairment, possess identity info to commit etc indictable, two counts of unauthorised function with intent serious offence (penalty

The man was granted strict conditional bail to appear in Waverley Local Court on Wednesday 8 May 2024.

Police will allege in court the malware on the school computers were in various stages of development and deployment, with at least 41 members of staff having had their credentials captured, including their credit card details.

Commander of State Crime Command’s Cybercrime Squad, Detective Superintendent Matt Craft praised the Department of Education for identifying this issue so early.

“The Department of Education cyber team have a robust system able to detect these types of offences, and it’s through their diligent work that this issue was reported early, and the offender detained quickly,” Det Supt Craft said.

“Teachers and staff at our schools are in a position of responsibility and privilege; and anyone that abuses that position will be dealt with accordingly by law enforcement.”

Anyone with information that may assist investigators is urged to contact Crime Stoppers: 1800 333 000 or Information is treated in strict confidence. The public is reminded not to report information via NSW Police social media pages.

/Public Release. View in full here.