Notorious group of teenage hackers may be behind recent Rockstar Games and Uber hacks

If you don’t live under a rock, you’ve probably heard of Rockstar ‘s massive hack that resulted in over 90 videos of the highly anticipated Grand Theft Auto VI game being leaked . While the breach is still under investigation, at this point it appears that the hacker was able to access Rockstar Games’ Slack internal messages and access all content from there.

An Uber EXT contractor account has been compromised by an attacker. It is likely that the attacker acquired the contractor’s corporate Uber password on the dark web after the contractor’s personal device was infected with malware that exposed those credentials. The attacker then repeatedly tried to log into the contractor’s Uber account. Each time, the contractor received a two-factor entry confirmation request, which initially blocked access. Eventually, however, the contractor accepted it, and the attacker successfully logged in.

Uber newsroom

Another hack simultaneously compromised Uber’s internal systems. And this time, the hacker was able to access all of this information by hacking into the company’s Slack channels . While the full extent of the hack is still under investigation, the screenshots leaked by the attacker paint a very disturbing picture. What’s more, US investigators now believe that both Rockstar Games and the Uber hack may have been carried out by the same group, called the Lapsus$ crime group .

And there’s a good reason for that too, as previous group hacks at other companies follow a similar mode of action where attackers gain access to a company’s internal messaging platforms through phishing techniques.

The group’s mastermind, a 16-year-old boy, was arrested earlier this year by British police in Oxford. City of London Police also arrested seven other teenagers for allegedly sharing links with a notorious hacker group. It is possible that the recent attacks were carried out by other members of the Lapsus$ crime group, or it could be some completely different group trying to pose as members of Lapsus$ and following their way of working.

Whenever such major breaches occur, there is actually a very serious investigation by the federal reserves and other US authorities. In most cases, the attackers are caught, unless they are state-sponsored or located in places where extradition is not possible. As for the current Uber and Rockstar hacks , both the FBI and the Justice Department are investigating them, though there is nothing to share at the moment.

Leave a Reply

Your email address will not be published.