scorecardresearch
Thursday, Feb 02, 2023
Advertisement
Premium

Microsoft confirms hacker group Lapsus$ breached its systems

Microsoft Corp said that the hacker group Lapsus$ gained “limited access” to its systems, following a claim by the group that it obtained source code for the Bing search engine and Cortana voice assistant.

Microsoft, Microsoft hacked, Lapsus hacking group, Lapsus cyberhacking groupThe fresh graduate has received an offer from Microsoft for an annual salary package of Rs 47 lakh (Image credit: Reuters)

Microsoft Corp said that the hacker group Lapsus$ gained “limited access” to its systems, following a claim by the group that it obtained source code for the Bing search engine and Cortana voice assistant.

The software giant had been tracking the activities of Lapsus$ — which it labels a “large-scale social engineering and extortion campaign” — for several weeks and provided some details on the methods of its attacks in a blog post late Tuesday. Lapsus$ had previously breached the cybersecurity defenses of Nvidia Corp. and Samsung Electronics Co., and this week also claimed to have gained access to the system privileges of Okta, the San Francisco-based company that manages user authentication services for thousands of corporate clients.

“Our investigation has found a single account had been compromised, granting limited access,” Microsoft said. “Our cybersecurity response teams quickly engaged to remediate the compromised account and prevent further activity. Microsoft does not rely on the secrecy of code as a security measure and viewing source code does not lead to elevation of risk.”

The hacking group, which has been given the designation DEV-0537 by Microsoft’s cybersecurity researchers, has been expanding the geographic range of its targets and going after government organizations as well as the tech, telecom and health-care sectors, according to the blog post. They are also known for hijacking cryptocurrency accounts, Microsoft said.

Subscriber Only Stories
Union Budget 2023 | After targeting rural and urban poor, a 2024 signal: ...
Chhattisgarh: How mohalla classes and online sessions helped students tid...
Healthcare budget: 157 new nursing colleges on the cards, drive to end si...
Delhi Confidential: During Budget speech, Nirmala Sitharaman’s slip...

Lapsus$ has made claims on social media that it’s infiltrated several large tech companies besides Microsoft. Its Telegram channel was first to announce the Microsoft and Okta breaches this week and also included mention of breaching employee accounts of LG Electronics Inc.

“Unlike most activity groups that stay under the radar, DEV-0537 doesn’t seem to cover its tracks,” said Microsoft, based in Redmond, Washington. “They go as far as announcing their attacks on social media or advertising their intent to buy credentials from employees of target organisations.”

First published on: 23-03-2022 at 08:53 IST
Next Story

Novavax says its Covid-19 vaccine gets India authorisation for teens

Latest Comment
Post Comment
Read Comments
Advertisement
Advertisement
Advertisement
Advertisement
close