Caitlin SarianEducator, Influencer, Cybersecurity Expert, Founder

Uber hack

Name: Uber hack
Uploaded: 2022-09-21T03:10:11+00:00
Duration: 1 min
Channel: Caitlin Sarian
Description: An 18-year-old hacker called Teapot breached Uber in 2022 by infecting a contractor's device with malware, then spamming their two-factor authentication…

21 Sept 2022 · 1 min

Watch on YouTube

1:00

An 18-year-old hacker called Teapot breached Uber in 2022 by infecting a contractor's device with malware, then spamming their two-factor authentication until they accepted a push notification. From there, he accessed Slack and Google Workspace to escalate privileges, though Uber says he never reached production systems or customer data.

Questions this video answers

Lapsis Group

18 years old; moniker 'Teapot'

Malware on an external contractor’s device, plus social‑engineered acceptance of 2FA push notifications after repeated prompts

Slack and Google Workspace (screenshots taken from Slack channels)

Uber said no unauthorized code changes were made

Chapters

Uber was hacked and here's what happened. Hi, I'm Caitlin. I'm a cyber security and data protection expert and I want to help you understand what happened with the Uber hack. Let's go. Uber explained on Monday that they believe that the attack happened by Lapsis Group, a notorious hacking group. The hacker behind the uber Reach, an 18 year old whose moniker's name is Teapot, also claimed the responsibility for breaking into Rockstar Games this weekend. Uber believes that an external contractor's device had malware in it, and even though the hacker was trying to get into the device, someone, since there was two Factor authentication on the external contractor, was getting notifications on his phone saying that someone was trying to log in using his credentials and he declined it. But after a few more attempts by the hacker, he ended up accepting that the hacker got into the system and therefore got access to the Team, Slack and Google Workplace. From there, the hacker was able to get certain screenshots from the Slack channel, used all these things to weasel his way in even further. Now, Uber didn't disclose how many employee accounts were compromised. They did say that no unauthorized code changes were made. Uber also claims that they have no evidence that the hacker got into any production systems or customers.