Samsung is the new victim of the LAPSUS$ group

The electronics company Samsung, very famous for its smartphones, has become a new victim of the extortion group LAPSUS$. In this new attack, the stolen data shows details of the very popular Galaxy series. This one is added to the new wave of attacks on big brands that are going on in the year. Learn more about this new cyberattack in the following article.

Read: The Russia-Ukraine conflict has found in Telegram the place for disinformation and hacktivism

LAPSUS$ group turns Samsung into its new victim

The South Korean company Samsung announced on Monday that it was the victim of a cyberattack that resulted in the exposure of important information on its internal side, but the hardest blow was the theft of the source code of the Galaxy series. These have made the company one of the most powerful in Southeast Asia and in the technological area.

However, it should be clarified that Samsung does not only manufacture smartphones. But it has different lines of electronic devices that range from offices to home. There is no doubt that its Galaxy series is the most popular and best-selling.

“According to our initial analysis, the breach involves some source code relating to the operation of Galaxy devices, but does not include the personal information of our consumers or employees,” the electronics giant told Bloomberg.

The manufacturer that has just launched its new devices, the Galaxy S22, also clarified that its processes have not been compromised, much less the customers’ data. At the same time, they talked about taking more accurate security measures to protect their internal systems and networks.

The LAPSUS$ group was the first to announce this cyberattack by sharing 190 GB of stolen information through its Telegram group. Among which you could see the source code for trusted applets installed within TrustZone, algorithms for biometric authentication, bootloaders for recent devices, and even confidential data from its chip supplier Qualcomm. After this, the first to report the cyberattack was Bleeping Computer on March 4.

LAPSUS$ is definitely gaining ground in the cybercriminal world. This group that appeared at the end of December 2021 has been gaining momentum in the digital world. Before this attack on Samsung, it was possible to observe the one directed at NVIDIA, where they even requested a ransom for the data obtained, which amounted to more than 1 TB. It is unknown if they also requested a ransom from Samsung, since neither party reported this. It only remains to wait for their next move and see who will be the next victim. Keep in touch with our blog to read the latest news and innovations in the cybersecurity world.