Uber states Lapsus$ hacker breached the company / GTA6 source code and videos leaked by hackers / Europol and Bitdefender release free LockerGonga decryptor

Plus: Cybera raises $5M

Inside.com Part of   Network September 19, 2022

Presented by

Uber has stated that it believes a hacker from Lapsus$ group is responsible for breaching the company. Lapsus$ is a former hacker group that was disbanded earlier this year by law authorities and is responsible for numerous breaches. More: In the official statement, Uber stated that it is cooperating with the FBI and the U.S. Department of Justice. The company claims that it still believes no personal data has been stolen by the threat actor, while the hackers used social engineering as a threat vector by repeatedly attempting to log in until the victim confirmed the request in the 2FA authentication app. Lapsus$ group was masterminded by a 16-year-old based in Oxford, England. The threat actor is known for breaching companies such as Microsoft, Samsung, Cisco, Nvidia, T-Mobile, etc. The group was disbanded by the City of London Police force, as several members were arrested in March 2022. NOTE: Inside.com founder and CEO Jason Calacanis is an investor in Uber.

GTA 6 source code and videos have been leaked by a threat actor who breached Rockstar games. The threat actor, who claims they are the same one who recently hacked Uber, published the stolen information on GTA internet forums. More: The hackers stole the information by hacking Rockstar's Slack server and Confluence credentials. The stolen information includes details such as: camera angles, NPC tracking, locations in Vice City, and voiced conversations. This content was then shared by other users on social media, while the hashtag GTA6 trended worldwide on Twitter.  A threat actor named TeaPots has taken credit for the cyber attack while also claiming that they are the same individual who hacked Uber only a few days ago. Rockstar Games has confirmed the authenticity of the breach.

A message from QUANTUM Save Your Data Before It Needs Saving - Air-Gapped Protection: Reliable and Cost-Effective Paying a ransom may sound like the best case scenario: get your data back, make your customers feel worth it. But actually, it can affect your business in other ways and may, in some cases, be illegal. Make sure your systems are protected across the entire data lifecycle - and never pay a ransom again. You’re able to balance cost while maximizing efficiency. No one can stop ransomware or fully prevent it from taking place - but you can make sure you’re protecting your customers and your data by ensuring that there is a fully air-gapped solution. Request A Demo

European security agency Europol and cyber security company Bitdefender have released a free decryptor for the LockerGoga ransomware. Swiss law enforcement agencies also participated in the project. More: LockerGoga is a ransomware variant that changes the password of its victims once it infects their devices. The malware hides in the victim's device, creating a renamed folder that contains encrypted content. Another factor that makes LockerGoga unique is the fact that it evades Virtual Machines by being able to stay in stealth mode. Law authorities managed to develop the decryption key by analyzing several infected devices throughout the course of several months. The ransomware has affected over 1,800 victims in 71 countries. Twelve members of LockerGoga Ransomware were arrested in 2021 in Ukraine and Switzerland in an operation that saw law authorities confiscate $52,000, five vehicles, and other valuable assets.

Cybersecurity startup Cybera has raised a $5M growth round. Cybera is based in New York City. More: The round was led by Converge VC and New North Ventures with participation from Founder Collective, and Swiss VCs Serpentine and CV VC.  The company offers a platform that helps cybercrime victims know how to proceed after a breach and a global watchlist of suspicious accounts. Cybera aims to use the funding to boost its product development. The company claims it has identified over 2,000 cases for its clients so far.

A message from SECURITY COMPASS Current approaches to software threat modeling simply don’t work.  They are: Manual Inconsistent Take too long Don’t scale Don’t give developers what they need When software security and compliance are considered more as an afterthought, rather than a vital step in the development process, organizations end up trying to remediate security and compliance issues after software has been written, rather than preventing issues in the first place. Here you can find a series of posts breaking down how you can anticipate threats earlier in the software development life cycle to create more secure and compliant software. Empower DevSecOps teams to make software secure and compliant by design through automating threat modeling, generating application security requirements, and providing secure development and compliance best practices. The SD Elements platform is the best solution for organizations who need to scalably model software threats, identify countermeasures, and deliver secure, compliant code quickly. Download whitepaper bundle

TeamTNT hacker group has been tracked attempting to hack Bitcoin encryption solver servers. The threat actor is actively deploying two other hacking campaigns. More: Researchers are tracking the hacking campaign as the Kangaroo attack. This hacking campaign is meant to break Bitcoin's encryption, something that is considered impossible to achieve with the current technological capacity that algorithms have. Bitcoin's encryption is considered breakable only by quantum computing. While the attack has several features that are reminiscent of Pollard's Kangaroo algorithm, there are also some new capabilities, such as lateral movement, crypto mining, etc.

Quick Hits: Spending a lot of time managing your cloud infrastructure? Free up your schedule by using intelligent technology to streamline CloudOps.* The U.S. government has declared that it is against a full ban on ransomware payments, even though it has a policy that highly directs all hacked organizations and individuals to refuse to pay them. Anne Neuberger, deputy national security advisor for cyber and emerging technology on the National Security Council, stated that by implementing a full ban, the government would only force companies to go undercover with their payment. Quantum and BlackCat hacker groups are using Emotet Botnet, according to researchers. The two groups have taken over the deployment of this malware after Conti, which used to deploy it exclusively, was shut down earlier this year. Microsoft has released a new statement in which it warns gamers of a new hacking campaign that attempts to download an ISO file that leads to click monetization. According to a new report, Artificial Intelligence is being increasingly used by cybersecurity professionals, with the technology projected to grow to $28B by 2030. *This is sponsored content.

Upcoming events at Inside: September 21 - AMA with Kristen Ruby (Founder of Ruby Media Group) (Register Here) September 22 - "Top 10 Overlooked VxWorks Features" with Brian Kuhl (Register Here) * September 28 - AMA with Leigh-Ann Buchanan (Founder of aīre ventures) (Register Here) October 05 - AMA with Ram Bartov (Chief Accounting Officer at TripActions)* (Register Here) October 11 - AMA with Mike Malone (Smallstep)* (Register Here) October 12 - AMA with Bill Glenn (Executive Chairman at Crenshaw Associates) (Register Here) October 19 - AMA with Zecca Lehn (Responsibly VC) (Register Here) October 25 - Meet Our Fund 4, an Inside.com Summit (Register Here) *This is a sponsored listing.

Arbër is an Inside writer who also has experience in entrepreneurship. He has experience covering Consumer Tech, Venture Capital, NFTs, Crypto, etc. Arbër holds a Bachelor's degree in Business from XAMK University in Finland. When he is not reading(and writing) business news, he chooses to watch sports or anime...and then read news about sports or anime. Editor Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 and 1972 Fords.

With Quantum, we shift the focus from accumulating data to making it work for you.

Security Compass is on a mission to accelerate software time-to-market while managing risk.

767 Bryant St. #203, San Francisco, CA 94107 Copyright © 2022 Inside.com

Did someone forward this email to you? Head over to inside.com to get your very own free subscription! You received this email because you subscribed to Inside Security. Click here to unsubscribe from Inside Security list or manage your subscriptions.