Blog

A 26-year-old Indian-origin engineer serving in the Singapore Air Force was sentenced to 11 months in jail for hacking social media login details of women to steal their intimate images. He used trial-and-error methods to access victims’ accounts after generating potential login credentials based on their social media details. Upon gaining access, he would search for intimate photos stored in the accounts.

K Eshwaran, 26, pleaded guilty to 10 charges under the Computer Misuse Act, with another 21 charges considered during sentencing, reported Channel News Asia.

Prosecutors revealed Eshwaran targeted victims from 2019 to 2023, sending phishing links to 22 victims in an attempt to steal their login credentials for social media, cloud storage, and email accounts.

Eshwaran targeted women he knew personally.

A court order protected the identities of all victims due to the sexual nature of the offences.

Deputy Public Prosecutor Joshua Phang argued that Eshwaran’s crimes were premeditated and sophisticated, often posing as a “helpful netizen” to gain the victims’ trust.

Phang said Eshwaran would send phishing links with messages claiming their intimate images were leaked online.

He often added a screenshot with a sexual caption, usually taken from a pornographic website, claiming it was a screenshot of the victim’s intimate image posted online.

In some instances, Eshwaran used trial-and-error methods to access victims’ accounts after generating potential login credentials based on their social media details.

Upon gaining access, he would search for intimate photos stored on the accounts which he wanted for his own sexual gratification, reported Channel News Asia.

Eshwaran reportedly targeted men as well, impersonating them on social media to contact women believed to be romantically involved with the men, requesting intimate photos.

INDIAN-ORIGIN MAN CONTINUED HIS CRIME EVEN WHILE ON BAIL

The court heard that Eshwaran continued his crimes even while on bail and under investigation for earlier phishing attacks.

In January 2023, he gained unauthorised access to the social media accounts of a woman in her early 20s. After discovering intimate images, he sent her further phishing links to gain access to her other online accounts.

Law enforcement traced the internet protocol (IP) address used in the unauthorised access back to Eshwaran’s residence.

Several victims reported the incidents to the police upon realising they were being phished or their accounts were hacked.

Defence lawyer Mervyn Tan argued for leniency, stating this was Eshwaran’s first offence and downplaying the crime as “an act of mischief”.

Tan highlighted Eshwaran’s service as an engineer in the Singapore Air Force and the potential professional consequences he may face. He added that Eshwaran’s family disapproved of his actions and requested the judge consider this as a mitigating factor.

The judge agreed with the prosecution’s sentencing recommendation, citing the seriousness of the offences.

Eshwaran will be formally sentenced on June 19.