Nvidia hackers leak 190GB of data allegedly stolen from Samsung

Shutterstock

LAPSUS$, the hacking group dependable for the latest Nvidia hack, assert to have breached tech giant Samsung to steal pretty much 200GB of sensitive information. 

Amid the 190GB trove of exposed data files is supply code for Samsung’s activation servers, bootloaders and biometric unlock algorithms for all just lately unveiled Samsung gadgets, and dependable applets for Samsung’s TrustZone natural environment. Confidential resource code belonging to Qualcomm is also considered to be among the leaked data 

Members of the LAPSUS$ hacking group have claimed responsibility for the facts breach, putting up details of the obtained facts in a Telegram channel and telling other customers to “enjoy” the contents which have been manufactured available to obtain in excess of Torrent. 

In accordance to the message, the hackers also managed to receive “various other data”, but the elements shown could put Samsung product consumers in immediate danger of staying hacked or impersonated by cyber criminals.

For instance, the trustworthy applets (TA) source codes attained by LAPSUS$ are mounted in Samsung’s Dependable Execution Ecosystem (TEE) known as TrustZone, indicating that the hackers – and everybody who has downloaded the Torrent data files – could be able to bypass Samsung’s components cryptography, binary encryption, as properly as access handle. 

The whole dimensions of the leaked details comes to about 190GB, which LAPSUS$ split into a few compressed files, and more than 400 peers have previously downloaded and shared the torrent.

Neither Samsung nor Qualcomm was quickly accessible for remark, and it remains unclear whether or not the hacking group had any requires for Samsung right before it leaked the private info. 

Information of the hack will come just weeks after researchers discovered “severe” security flaws in a long line of Samsung’s flagship smartphones that, if exploited, would enable attackers to lift cryptographic keys.

It also comes five days immediately after Nvidia verified that the LAPSUS$ hacking team experienced effectively breached its units on 26 February and dispersed 1TB of confidential company details, together with security qualifications belonging to 71,000 previous and present Nvidia personnel. 

The hacking collective managed to obtain the info working with a double extortion strategy of procedure that involves compromising a target and stealing facts in advance of encrypting their equipment, as very well as threatening to leak the stolen info if the ransom isn’t paid out. Double extortion situations have been on the increase in the past calendar year, with a person in seven conditions resulting in critical knowledge becoming leaked. 

Although LAPSUS$’ attacks come amid the escalating cyber warfare brought on by the Russian invasion of Ukraine, the hacking team has managed that it is “not point out sponsored” and that its actions aren’t politically motivated.

Some pieces of this article are sourced from:
www.itpro.co.uk