T-Mobile has confirmed a recent security breach orchestrated by a group of teenagers known collectively as Lapsus$. However, the Un-carrier stressed that the group was unable to access “customer or government information or other similarly sensitive information.”
Krebs on Security initially made the report after revealing that the hackers were able to steal the company’s source code in March. The report shared screenshots of messages among the seven members prior to their arrest.
The group was able to gain access to Atlas, T-Mobile’s customer management system, after purchasing employee credentials online. Once they were able to infiltrate the system, the hackers were able to do SIM swaps.
The hackers also attempted to hack the T-Mobile accounts of the Department of Defense and the FBI. But since additional verification measures were required, they were unable to access it.
Here is what T-Mobile had to say about the attack:
“Several weeks ago, our monitoring tools detected a bad actor using stolen credentials to access internal systems that house operational tools software. Our systems and processes worked as designed, the intrusion was rapidly shut down and closed off, and the compromised credentials used were rendered obsolete.”
The group has also targeted other large-scale companies like Microsoft, Samsung, Nvidia, Globant, Okta, and Ubisoft.
Source: The Verge
