Lapsus$, the group responsible for the recent data leaks and security breaches at Nvidia, now claims to have stolen data from Samsung.
The group claims to be in possession of 190GB of data, including Samsung source code and other confidential company data.
However, unlike the attack on Nvidia that was prompted due to the limiting of crypto-mining capabilities of its chips, it is not yet clear why Samsung has been attacked, nor has a ransom been publicly demanded.
It is, therefore, possible that Lapsus$ may not have even been the group that breached Samsung and instead merely acquired the data.
So far, Lapsus$ has not proven it holds the data, but if it is telling the truth, it has three archives of data that include source code for products, encryption data and backend data.
The data Lapsus$ potentially holds includes, but is not limited to:
- Source code for every Trusted Applet (TA) installed in Samsung’s TrustZone environment used for sensitive operations (hardware cryptography, binary encryption, access control).
- Algorithms for all biometric unlock operations.
- Bootloader source code for all recent Samsung devices.
- Confidential source code from Qualcomm.
- Source code for Samsung’s activation servers.
- Full source code for technology used for authorising and authenticating Samsung accounts, including APIs and services.
Samsung has not commented on the issue.
Loading ...
