Hacking group claims to leak Microsoft source code

Did you miss the session at the Data Summit? See on-demand here.


The perilous actor who previously stole and leaked data from Nvidia and Samsung now claims to have posted Microsoft source code for Bing, Bing Maps and Cortana on his telegram channel.

The threatening actor, Lapsus $, who is believed to be working in South America, posted a lawsuit on the Telegram on Monday PST at 6:17 p.m.

On Sunday, Lapsus 7 posted a screenshot in which it claimed that Microsoft has source code repositories, including Bing and Cortana.

The group claimed to have hacked the Azure DevOps server and gained access to the repositories. The screenshot was later deleted without explanation. “Will be posting again later,” the group said.

In response, Microsoft released a statement saying the company was in the process of investigating the claims.

A new telegram post on Monday included a 483 KB file, which Lapsus $ claims is part of the source code for Microsoft’s Bing search engine, Bing Maps service and Cortana Virtual Assistant. The group noted that the file contains 90% of the Bing Maps data it claims to have been stolen, and 45% of the Bing and Cortana data it claims to have been stolen. “Give everyone joy!” Reads the post.

VentureBeat has reached out to Microsoft to comment on the latest claims by Lepsus2.

“Given the lack of denials from Microsoft and Lapsus $ ‘s past victims, their claims are not entirely unreliable,” Brett Kello, a threat analyst at MCSoft, told VentureBeat in a message. “Gangs seem somewhat awkward, which suggests they are relatively inexperienced – and the fact that they are able to hit large corporations somewhat surprisingly.”

Screenshot of Lapsus $ Telegram Channel

Last month, vendors including Nvidia and Samsung Electronics confirmed data theft by the threatening actor. For example, on March 1, Nvidia stated that “we know that the threatening actor has taken employee credentials and some Nvidia ownership information from our system and started leaking it online.”

The stolen Nvidia data allegedly includes the design of the graphics card and the source code for DLSS, an AI rendering system.

Experts say Lapsus હેતુ’s motives are unclear given the lack of financial demand in the past.

Venturebeat’s mission Digital Town Square is set to become a place for technical decision makers to gain knowledge about the changing enterprise technology and practices. Learn more

Similar Posts

Leave a Reply

Your email address will not be published.