YouTube explainer (Caitlin Sarian, Sept 23, 2022) about the Lapsus$ hacking group: who they might be, their high-profile targets (Microsoft, Vodafone, Nvidia, Okta, and possibly Uber and Cisco), and their unconventional, opportunistic intrusion methods (credential theft, paid employee credentials, exploiting unpatched vulnerabilities, broad, repeated door‑knocking). The video emphasizes uncertainty about members’ identities and the ‘‘weakest link’’ security lesson.
Chapters
So who is the Lapsis hacking group and what the heck is happening? This hacker group has literally hacked Microsoft, Vodafone, Nvidia, Okta, potentially Uber, potentially Cisco. So who are these people? How are they doing it? What's happening? No one actually knows who they are. They think there are a few younger people in Brazil and in the uk, but to this day no one knows who they are. And the way that they determine who's getting hacked is they literally ask their community who they should hack. They have a very unconventional ways of getting into systems. Some ways are password thefts, paying employees for their credentials, exploiting unpatched vulnerability. Best way I can describe it is imagine a guy and there's a thousand different doors and he literally tries every door. Then he gets into one door, then he tries another, thousand different doors, gets into another door and eventually he just gets into everything. Even though they get in in very unconventional ways, they should not be downplayed because they're gonna get in if they want to get in. Way they got into Uber was crazy. And watch my video about Uber. But the moral of the story is you're only as strong as your weakest link. So.
