The Lapsus$ hacker group, which includes young people, has carried out highly effective cyber attacks on large IT companies such as Microsoft, Nvidia and Globant. Details of hacker attacks reported by publication ArsTechnica.
Hackers used inventive and persistent hacking methods that, with a small organization, allowed them to successfully break into the internal infrastructure of some of the most secure companies.
Among the methods used by grouping, there is a special approach to bypass multi-factor authentication. The hackers made a nightly mass call to entice employees to pick up the phone. Thus, hackers verified their login to the internal network – receiving a call served as authentication.
Lapsus$ was also able to hack by replacing the SIM card. In this context, experts deemed it necessary to introduce passwordless authentication systems other than phone numbers.
Hackers successfully broke into Nvidia’s corporate network in the spring of 2022 and reportedly stole 1TB of the company’s data. The group demanded that Nvidia allow graphics cards to issue cryptocurrencies faster in exchange for Lapsus$ not publishing all the data.
However, the head of Lapsus$, 16-year-old Arion Kurtage, was caught and has been accused for the past few years.
Previously on Kaspersky said about the youngest hacker.