During the last few days, the LAPSUS$ hacker group has been making headlines online, and it's worth remembering that not long ago, this group managed to extract confidential information from two major corporations, one of them Nvidia and the other Samsung.
For the part of the attack they carried out on Nvidia, the group of hackers LAPSUS$ demanded that the company commit to open source drivers, if they did not want them to leak the information they obtained.
While on the part of Samsung, the group obtained the source code for various company products, including boot loaders, authentication and identification mechanisms, activation servers.
And now the new target of the hacker group was Ubisoft (one of the largest video game publishers in Europe. Owner of games like Assassin's Creed, Far Cry, Watch Dogs and other series) which faced a "cybersecurity incident" last week that temporarily disrupted certain games, systems and services.
Ubisoft did not say who was responsible for the attack, but on Friday night, a group that had previously hacked Nvidia and Samsung claimed responsibility.
Last week, Ubisoft experienced a cybersecurity incident that caused a temporary disruption to some of our games, systems, and services. Our IT teams are working with leading third-party experts to investigate the issue. As a precautionary measure, we initiated a company-wide password reset. Additionally, we can confirm that all of our games and services are operating normally and that, at this time, there is no evidence that player personal information has been accessed or exposed as a result of this incident.
On Friday, on a Telegram channel purportedly run by LAPSUS$, the group posted a message in which it was apparently claiming responsibility for the Ubisoft incident. In response to a message from a user on the channel, the group confirmed that Ubisoft customer information was not the target of the attack.
Ubisoft says players' personal data is safe , as long as there is no evidence that anyone has been able to access it. The company says that games and services are now "functioning normally." For security reasons, the company has also "initiated a password reset for all company accounts."
Ubisoft said Thursday that the issue will be resolved with the help of outside experts, as Ubisoft's IT team is working with experts to investigate the incident that occurred last week.
It is worth noting that in the previous hacks , those of Nvidia and Samsung, the hackers made a large amount of data available, and it is speculated that the group uses ransomware to ensure that their victims' systems have been hijacked, so to speak, and only when a large sum of money is paid will they reveal that data again.
Of course, it's always questionable whether that's really the case, because in the past there have been companies that were able to solve the problem as a result, as well as companies whose data ultimately ended up on the street. Nvidia also didn't say anything about ransomware: only that hackers had been inside and leaked data.
Ubisoft may not be the last victim of a wave of crimes that has already affected Nvidia and Samsung, and as a result, the company had to take measures to assure users that their information was safe.
Interestingly though, Lapsus$ seemed to be a bit shy about Ubisoft because the group didn't rush to take a stand like they did with the Nvidia and Samsung attacks, though what this group of hackers did do is that they also they made a large amount of data available through peer-to-peer networks.
Finally, if you are interested in learning more, you can consult the details of the original publication at the following link.