LAPSUS$ strikes again and now Ubisoft was the target of this group of hackers

During the last days the group of hackers LAPSUS$ has given a lot to talk about in the network and it is that we remember that not long ago, This group managed to extract confidential information from two large corporations, one of them Nvidia and the other Samsung.

For the part of the attack they carried out on Nvidia, the group of hackers LAPSUS$ demanded that the company commit to open source drivers, if they did not want them to leak the information they obtained.

While on the part of Samsung, the group obtained the source code for various company products, including boot loaders, authentication and identification mechanisms, activation servers.

Chippers
Related article:
Leaked code of Samsung products, services and security mechanisms

And now the new target of the hacker group was Ubisoft (one of Europe's largest video game publishers. It owns games from Assassin's Creed, Far Cry, Watch Dogs and other series) who faced a "cybersecurity incident" last week that temporarily disrupted certain games, systems and services.

Ubisoft did not say who was responsible for the attack, but on Friday night, a group that had hacked prior to Nvidia and Samsung claimed responsibility.

Last week, Ubisoft experienced a cybersecurity incident that caused a temporary disruption to some of our games, systems, and services. Our IT teams are working with leading third-party experts to investigate the issue. As a precautionary measure, we initiated a company-wide password reset. Additionally, we can confirm that all of our games and services are operating normally and that, at this time, there is no evidence that player personal information has been accessed or exposed as a result of this incident.

On Friday, on a Telegram channel purportedly run by LAPSUS$, the group posted a message in which it was apparently claiming responsibility for the Ubisoft incident. In response to a message from a user on the channel, the group confirmed that Ubisoft customer information was not the target of the attack.

Ubisoft says players' personal data is safe, as long as there is no indication that someone has been able to access them. The company says games and services are now "working as normal." For security reasons, the company has also "initiated a password reset for all company accounts."

Ubisoft said Thursday that the issue will be resolved with the help of outside experts, as Ubisoft's IT team is working with experts to investigate the incident that occurred last week.

It should be noted that in previous hacks, those of Nvidia and Samsung, hackers made a large amount of data available and it is speculated that the group uses ransomware to ensure that their victims' systems have been hijacked, so to speak, and only when a large sum of money is paid, will they reveal that data again.

Of course, it's always questionable whether that's really the case, because in the past there have been companies that were able to solve the problem as a result, as well as companies whose data ultimately ended up on the street. Nvidia also didn't say anything about ransomware: only that hackers had been inside and leaked data.

Ubisoft may not be the latest victim of a crime wave that has already affected Nvidia and Samsung and to which cAs a result, the company had to take steps to assure users that their information was secure. 

Interestingly though, Lapsus$ seemed to be a bit shy about Ubisoft because the group didn't rush to take a stand like they did with the Nvidia and Samsung attacks, though what this group of hackers did do is that they also they made a large amount of data available through peer-to-peer networks.

Finally If you are interested in knowing more about it, You can check the details of the original publication in the following link


Leave a Comment

Your email address will not be published. Required fields are marked with *

*

*

  1. Responsible for the data: Miguel Ángel Gatón
  2. Purpose of the data: Control SPAM, comment management.
  3. Legitimation: Your consent
  4. Communication of the data: The data will not be communicated to third parties except by legal obligation.
  5. Data storage: Database hosted by Occentus Networks (EU)
  6. Rights: At any time you can limit, recover and delete your information.