Notorious Hacking Group Lapsus$ Behind Microsoft, Nvidia And Other Breaches Draws Regulatory Review

The Department of Homeland Security’s Cyber Safety Review Board looked to study the Lapsus$ hacking group that gained notoriety for carrying out breaches at major U.S. companies this year.
The board, comprised of senior government cyber officials and industry representatives, aimed to review and compile reports on significant cybersecurity issues.
In its first review, the board examined a Log4j open-source software library flaw.
Lapsus$ came into the forefront after hacks affecting Microsoft Corp MSFT, Nvidia Corp NVDA, Okta Inc OKTA, and other major technology companies.
Security researchers found that the alleged mastermind of the group was a teenager living at his mother’s home in England, who was later arrested by police in the U.K. earlier this year.
Members of Lapsus$ have employed social engineering techniques like targeting companies that operate call centers for brand name firms, then publicizing their successes on a Telegram channel, Bloomberg reports.
Alleged Lapsus$ hackers had also targeted Brazilian healthcare systems and police departments before their arrest in October.
“Lapsus$ actors have perpetrated damaging intrusions against multiple critical infrastructure sectors, including healthcare, government facilities, and critical manufacturing,” said Cybersecurity and Infrastructure Security Agency Director Jen Easterly.