Uber claims hack came from Lapsus$, the group behind Microsoft and T-Mobile attacks

J. Fingas@jonfingasSeptember 19, 2022 3:23 PMIn this post: Internet, information, equipment, Uber, ridesharing, Security, Lapsus$, hackAustin Distel on Unsplash

Uber believes it has identified the group driving previous week’s hack, and the title will sound all also common. In an update on the breach, Uber stated the perpetrator was affiliated with Lapsus$, the hacking group that has specific tech corporations like Microsoft, Samsung and T-Cell. The exact intruder may well also have been responsible for the Rockstar hack that leaked Grand Theft Car VI, Uber claimed.

It truly is also clearer just how the perpetrator may perhaps have accessed Uber’s inner systems. The attacker possible purchased the contractor’s login aspects on the dark web soon after they’d been exposed by a malware-infected pc. Two-issue authentication to begin with prevented the hacker from obtaining in, but the contractor accepted an authentication ask for — that was enough to support the invader compromise employee accounts and, in convert, abuse company apps like Google Workspace and Slack.

As in advance of, Uber pressured that the hacker didn’t access general public-experiencing systems or consumer accounts. The codebase also stays untouched. Although those people accountable did compromise Uber’s bug bounty application, any vulnerability studies involved have been “remediated.” Uber contained the hack by restricting compromised accounts, temporarily disabling applications and resetting obtain to solutions. There is also added monitoring for unconventional activity.

Turn on browser notifications to acquire breaking news alerts from EngadgetYou can disable notifications at any time in your settings menu.Not nowTurn onTurned onTurn on

The incident update implies the damage to Uber is somewhat limited. Having said that, it also indicates that Lapsus$ is even now hacking higher-profile targets irrespective of arrests. It also underscores significant tech companies’ continued vulnerability to hacks. In this scenario, a single improper shift by a contractor was all it took to disrupt Uber’s functions.

All merchandise recommended by Engadget are picked by our editorial group, impartial of our father or mother company. Some of our stories contain affiliate back links. If you invest in one thing as a result of one of these links, we may well generate an affiliate commission. All rates are suitable at the time of publishing.


Some parts of this article are sourced from:
engadget.com