A lot of online security groups are now reporting that the hacker group Lapsus$ is behind the cyber attack on NVIDIA, also claiming that NVIDIA hacked them back while encrypting the data that was stolen. NVIDIA stayed on a statement that they were investigating a security incident that technically made their entire system completely compromised. Lapsus$ claimed that they stole one terabyte of data from NVIDIA and they were threatening to leak their employee’s passwords and security details. They also put in some screenshots of the claims.
Lapsus$ later also said that Nvidia hacked it in return, as the Hacker Group left one of their VMs enrolled in Nvidia’s mobile device management program allowing Nvidia to get a backdoor to their systems. Nvidia encrypted the entire data and removed the group’s access to the company network. But now, the hackers claim to have made a copy of the data.
Some sources say that they already leaked some of the employee data on Telegram, but it’s not verified. But when all of what’s happening, it seems like NVIDIA has got a lot of time to update the employee credentials in their entire network. Lapsus$ claims that they also have information about Nvidia GPUs, meaning that data should be protected to protect the GPU functionality. Currently, Lapsus$ cannot seem to convince Nvidia that they have enough data to get a ransom.
