Researchers Trace LAPSUS$ Cyber Attacks to 16-Year-Old Hacker from England
A 23-year-old Russian national has been indicted in the U.S. and added to the FBI's Cyber Most Wanted list for allegedly administering a cybercrime forum that sold stolen login credentials, personal and credit card data.
A 16-year-old behind LAPSUS$ ?
The security breaches of Okta and Microsoft are the latest in a rampage of infiltrations staged by the LAPSUS$ group, which has also hit high-profile victims like Impresa, NVIDIA, Samsung, Vodafone, and Ubisoft. It's also known for publicizing its conquests on an active Telegram channel that has over 46,200 members
"The real motivation of the group is still unclear however, even if it claims to be purely financially motivated," the Israeli company said. "LAPSUS$ has a strong engagement with their followers, and even posts interactive polls on who their next unfortunate target should be."
a 16-year-old living at his mother's house near Oxford, England might be the brains behind the operation, citing four researchers investigating the group. Another member of LAPSUS$ is suspected to be a teenager living in Brazil.
"Back in May 2021, WhiteDoxbin's Telegram ID was used to create an account on a Telegram-based service for launching distributed denial-of-service (DDoS) attacks, where they introduced themself as '@breachbase,'" Krebs noted. "News of EA's hack last year was first posted to the cybercriminal underground by the user 'Breachbase' on the English-language hacker community RaidForums, which was recently seized by the FBI."