साइबर सुरक्षा के बुनियादी उपाय
साइबर सुरक्षा के बुनियादी उपाय
साइबर सुरक्षा जागरूकता का परिचय - एसएसएल ड्रैगन - SSL Dragon
इस डिजिटल फ्रंटियर को सुरक्षित रूप से नेविगेट करने के लिए, यह जरूरी है कि हम सामूहिक रूप से साइबर सुरक्षा जोखिमों की अपनी समझ को मजबूत करें और उन्हें कम करने के लिए सक्रिय उपाय अपनाएं। यह लेख साइबर ...
Nvidia, T-mobile और Samsung
Q1 2022 में, <anchor>Nvidia, T-mobile और Samsung</anchor> की पसंद लीक क्रेडेंशियल्स और इनसाइडर खतरों के माध्यम से कई हमलों का शिकार हुई। उदाहरण आगे बढ़ सकते हैं, लेकिन तस्वीर स्पष्ट है: कोई भी साइबर अपराधों से प्रतिरक्षा नहीं है, यहां तक कि बड़ी कंपनियां जो वेब सुरक्षा पर लाखों खर्च करती हैं। इसलिए साइबर सुरक्षा जागरूकता महत्वपूर्ण है।
Lapsus$ Cyberattack Victim List: Globant, Microsoft, Nvidia, Okta, Samsung, T-Mobile - | MSSP Alert
Open Search Bar

# Lapsus$ Cyberattack Victim List: Globant, Microsoft, Nvidia, Okta, Samsung, T-Mobile

April 22, 2022

Share

Search Hacked warning on laptop Concept of privacy data being hacked and breached from internet technology threat. 3d renderring.

Search Hacked warning on laptop Concept of privacy data being hacked and breached from internet technology threat. 3d renderring.

Although some alleged Lapsus$ hackers were arrested in March 2022, the hacker group continues to target and attack high-profile victims.

Here's a regularly updated list of alleged Lapsus$ cyberattack targets, the associated fallout, and steps that MSSPs can take to protect customers from such attacks.

- Globant: Digital transformation developer Globant confirmed that Lapsus$ had stolen source code developed for its clients. Source: SC Media, March 30, 2022.
- Microsoft Azure: Lapsus$ claims to have leaked the source code for Bing, Cortana, and other projects stolen from Microsoft's internal Azure DevOps server. Microsoft later confirmed a hack by Lapsus$. Sources: BleepingComputer and Microsoft, March 22, 2022.
- Nvidia: A cyberattack targeting Nvidia allegedly involved the Lapsus$ ransomware gang. Attackers have since leaked some Nvidia company information online, but the cyberattack did not impact the company’s operations and there’s no evidence that ransomware was deployed on Nvidia’s network, the chip maker has stated. Source: MSSP Alert, March 1, 2022.
- Okta: The identity and access management (IAM) software company is investigating an alleged data breach that may have been launched by Lapsus$. In a tweet, Okta CEO Todd McKinnon said their was no evidence of malicious activity beyond some activity detected in January 2022. Still, some observes expressed concern that Okta partners and customers could potentially suffer from a supply chain attack. Source: MSSP Alert, March 22, 2022.
- Samsung: The mobile device giant confirmed a rumored data breach in which hackers stole some Galaxy device source code. Still, Samsung stopped short of blaming the alleged culprit -- Lapsus$ -- for the breach. Source: MSSP Alert, March 7, 2022.
- T-Mobile: Lapsus$ breached T-Mobile multiple times in March 2022, stealing source code for a range of company projects. T-Mobile says no customer or government information was stolen in the intrusion. Source: KrebsOnSecurity, April 22, 2022.

Lapsus$ surfaced in December 2021 and the group may be led by one or more teenagers, Bloomberg reports. The group's tactics differs from other threat groups’ in that Lapsus$ "eschews the typical exfiltrate-encrypt-extort playbook, instead concentrating on the data theft and extortion, and the gang has a flair for the dramatic in its demands," The CyberWire reports.

## How to Protect Against Lapsus$ Ransomware Attacks

The FBI’s general guidance vs. ransomware attacks includes these 10 recommendations:

1. Back-up critical data offline.
2. Ensure copies of critical data are in the cloud or on an external hard drive or storage device. This information should not be accessible from the compromised network.
3. Secure back-ups and ensure data is not accessible for modification or deletion from the system where the data resides.
4. Use multi-factor authentication with strong passwords, including for remote access services.
5. Keep computers, devices and applications patched and up-to-date.
6. Monitor cyber threat reporting regarding the publication of compromised VPN login credentials and change passwords and settings.
7. Consider adding an email banner to emails received from outside your organization.
8. Disable unused remote access/Remote Desktop Protocol (RDP) ports and monitor remote access/RDP logs.
9. Audit user accounts with administrative privileges and configure access controls with least privilege in mind.
10. Implement network segmentation.

## How MSPs and MSSPs Can Respond to and Recover From Ransomware Attacks

If a ransomware incident occurs, then the CISA, FBI and NSA recommend the following four actions:

Joe Panettieri

Joe Panettieri is co-founder & editorial director of MSSP Alert and ChannelE2E, the two leading news & analysis sites for managed service providers in the cybersecurity market.

### Related



Privacy Statement All contents Copyright © 2024MSSP Alert and CyberRisk Alliance