Security News > 2022 > September > Uber and Rockstar – has a LAPSUS$ linchpin just been busted (again)?

Uber and Rockstar – has a LAPSUS$ linchpin just been busted (again)?
2022-09-24 22:57

As we mentioned back in March lapsus is as good a modern Latin word as any for "Data breach", and the trailing dollar sign signifies both financial value and programming, being the traditional way of denoting that BASIC variable is a text string, not a number.

Okta, a 2FA service provider, was another high-profile victim, where the hackers acquired RDP access to an support techie's computer, and were therefore able to access a wide range of Okta's internal systems as if they were logged in directly to Okta's own network.

That support techie didn't work for Okta, but for a company contracted by Okta, so that the attackers were essentially able to breach Okta's network without breaching Okta itself.

Intriguingly, even though Okta's breach happened in January 2022, neither Okta nor its contractor made any public admission of the breach for about two months, while a forensic examination took place.

When the City of London Police announced, just two days after the not-so-mirthful-at-all screenshots of the Okta attack appeared, that it had arrested what sounded like a motley bunch of youngsters in the UK for allegedly being members of a hacking group.

Shortly after the Uber hack, nearly an hour's worth of what seemed to be video clips from the forthcoming game GTA6, apparently screen captures made for debugging and testing purposes, were leaked following an intrusion at Rockstar games.


News URL

https://nakedsecurity.sophos.com/2022/09/24/uber-and-rockstar-has-a-lapsus-linchpin-just-been-busted-again/